joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ad260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad34c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xddea208bc40c5100
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6c69664853ddea20
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf06564fba6ed20f7
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1404020409100302
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1007130614060f02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60d00000d011113
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ad2ea
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ad31c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ad33f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0x15
jb 0x4ad2d0
jmp 0x4ad333
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ad260

Function at 0x4ad360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad44a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf8966d91adfb7473
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6970f8966d91adfb
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x112ffb1179f2657d
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0a0a07060d0a10
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0310040d040a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0a0602100d110e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ad3ed
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x4ad41a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ad43d
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x4ad3d0
jmp 0x4ad431
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ad360
Function at 0x4ae900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aea08
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x4def59240a4d6f6e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4262503c6558002d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x41776f7157697734
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x13050d1317170807
mov qword [rsp + 0x36], rdx
movabs rdx, 0x31013050d131717
mov qword [rsp + 0x38], rdx
movabs rdx, 0x407140f0f0c0602
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170a0907020d0703
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170514170a040703
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ae9ab
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4ae9d8
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4ae9fb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4ae98e
jmp 0x4ae9ef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ae900

Function at 0x4aede0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aeeac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6a2ef36f61f5f46a
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xee75
movabs rdx, 0x402040900070801
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7020509010402
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4aee44
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4aee7c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4aee9f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0xa
jb 0x4aee2a
jmp 0x4aee93
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004aede0
Function at 0x4aeec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aef87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa4da61a39dc3a294
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x576cf22e
movabs rdx, 0x2060306020906
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40909070107010b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4aef28
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4aef57
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4aef7a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4aef0b
jmp 0x4aef6e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004aeec0

Function at 0x4af9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afa67
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x663233256c60595f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x666c61663233256c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8020a070101040a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1010a
xor eax, eax
jmp 0x4afa08
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4afa37
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4afa5a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4af9eb
jmp 0x4afa4e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004af9a0

Function at 0x4b0180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0246
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74422d654674652d
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2a690604
movabs rdx, 0x90905030308060b
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x6050009
xor eax, eax
jmp 0x4b01e0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4b0212
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4b0237
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0xc
jb 0x4b01c4
jmp 0x4b022b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b0180
Function at 0x4b12c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1392
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1c2ffca031361b52
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xdf782a79001c2ffc
mov qword [rsp + 0x22], rdx
movabs rdx, 0x404060201030c07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x807050a040a0404
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b132c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b135e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b1385
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0xd
jb 0x4b1312
jmp 0x4b1375
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b12c0
Function at 0x4b3500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b35c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9a736c79c4f861a4
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x9145
movabs rdx, 0x604060300060200
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x907
xor eax, eax
jmp 0x4b3560
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4b3592
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b35b7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0xa
jb 0x4b3542
jmp 0x4b35ab
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b3500

Function at 0x4b3d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3dfd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xceb065d661b372c4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa68f8b944c968bce
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20d0e0c0602080c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc07040b020d0e0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b09060c090400
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b3da0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4b3dcd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b3df0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4b3d82
jmp 0x4b3de4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b3d20
Function at 0x4b4620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b46ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe2466548ccab5546
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x57d646e2466548cc
mov qword [rsp + 0x22], rdx
movabs rdx, 0x809040109030200
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x702080401090809
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b468f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4b46bc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b46df
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b4672
jmp 0x4b46d3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b4620

Function at 0x4b53c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b549d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c69d3b673756c46
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7f2f427f3fef93b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf040b0e090a050f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0f0f040b0e090a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40a0c0b080e0d0c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b5440
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4b546d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b5490
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b5422
jmp 0x4b5484
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b53c0
Function at 0x4b5e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5f26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcfcfe1b0c852aa5a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x576164b332d86ecf
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20d05010d0c0003
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30b09060c05020d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x407040a070d0c0d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b5ec0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4b5ef2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b5f17
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 0xf
jb 0x4b5ea2
jmp 0x4b5f0b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b5e40

Function at 0x4b6c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6d1b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xcfd3e7b3fc744b47
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xde44e565cce6b2cf
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5765e7dd59e2de61
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10e110d14120703
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8140c0510040c06
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe1008140c051004
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131114130a0e0509
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b6cb9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4b6ceb
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b6d0e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x72]
cmp rsi, 0x17
jb 0x4b6c9f
jmp 0x4b6d02
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004b6c20
Function at 0x4b79e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7abd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7713590467d9109
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90fee415236874b0
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4000d0001060205
mov qword [rsp + 0x28], rdx
movabs rdx, 0x705080f01000c02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80b040b0f060e0c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b7a60
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x75]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4b7a8d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b7ab0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b7a42
jmp 0x4b7aa4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b79e0

Function at 0x4b9a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9b2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7262b521af616fd2
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x88d71d3d
movabs rdx, 0xa0904030b040500
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0a03030b080a09
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b9ac5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b9afc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4b9b1f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0xc
jb 0x4b9aab
jmp 0x4b9b13
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b9a60
Function at 0x4bc340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc40c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5c656c5b615e5753
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3a51665c656c5b61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20a070907080a03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80801040401020a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bc3af
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4bc3dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4bc3ff
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4bc392
jmp 0x4bc3f3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bc340

Function at 0x4bd3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd472
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x54594c26742a3857
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4565041a7354594c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0402050a090601
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0c060605090707
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bd40c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4bd43e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4bd465
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0xd
jb 0x4bd3f2
jmp 0x4bd455
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bd3a0

Function at 0x4bdc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdcc7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x749f09019d6172a3
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x650ad37a
movabs rdx, 0x9030009050a0809
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x909060406060903
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bdc68
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4bdc97
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4bdcba
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4bdc4b
jmp 0x4bdcae
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bdc00
Function at 0x4c0580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c064c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x350027272afb31fa
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xed2b37350027272a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x608040100050802
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70708090a090305
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c05ef
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4c061c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c063f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c05d2
jmp 0x4c0633
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004c0580

Function at 0x4c1de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1ec6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74204c4c5c0e61d3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x563d616f45613b74
mov qword [rsp + 0x22], rdx
movabs rdx, 0x409090d0d000302
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x408050208000409
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0908020a08030e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c1e60
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4c1e92
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c1eb7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0xf
jb 0x4c1e42
jmp 0x4c1eab
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004c1de0