joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a20e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a21ec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4b74647541612d4b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6e5b472061696258
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x737c6e5b47206169
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6945244120247261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1909000d14051011
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x111111705080205
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1005011111170508
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0f07181618110d
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a2188
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a21bc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4a21df
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
cmp rsi, 0x1a
jb 0x4a216e
jmp 0x4a21d3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004a20e0

Function at 0x4a2200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2308
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x516e8173c0535541
mov qword [rsp + 0x19], rdx
movabs rdx, 0xec61e703203325e5
mov qword [rsp + 0x21], rdx
movabs rdx, 0xeaec61e703203325
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe2a1defb204e72e4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x503081707170903
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1104100407100a11
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20d0c11130d1104
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf100d15110f1816
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a22ab
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4a22d8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4a22fb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4a228e
jmp 0x4a22ef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00454ec0
mov eax, edi
mov ecx, 0x19
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004a2200
Function at 0x4a3f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a406c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x312073d06bf77535
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64131230312073d0
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe6def54205c0543
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe020c080d0d0205
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd07020411040d0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50004050a110913
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a400a
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a403c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4a405f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0x14
jb 0x4a3ff0
jmp 0x4a4053
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00454ec0
mov eax, edi
mov ecx, 0x14
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004a3f80

Function at 0x4a44a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a458a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe861e2e70aabf757
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x64e861e2e70aabf7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x656de60220be722c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20309000d050003
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1090b0902030900
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70104040e000001
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a452d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4a455a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a457d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4a4510
jmp 0x4a4571
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00454ec0
mov eax, edi
mov ecx, 0x11
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004a44a0
Function at 0x4a4820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a490c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x976563b9b16d0da6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa36ea1a656976563
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9da79a54b2649361
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc120a140301100e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x404090409080313
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110071000070c00
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a48aa
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a48dc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a48ff
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 0x15
jb 0x4a4890
jmp 0x4a48f3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00454ec0
mov eax, edi
mov ecx, 0x15
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004a4820

Function at 0x4a4ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4fec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7515b6c3ee750d08
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb4bcb11453c90175
mov qword [rsp + 0x26], rdx
movabs rdx, 0x652c8a3020e605f4
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe050510060d0509
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0e050510060d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50e0c01040d0115
mov qword [rsp + 0x40], rdx
movabs rdx, 0x608040903130b0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10514050c110305
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a4f88
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4a4fbc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x4a4fdf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0x17
jb 0x4a4f6e
jmp 0x4a4fd3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004a4ee0
Function at 0x4a5de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5ee8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9b6ce95a04fa65fa
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2063835cebfb6162
mov qword [rsp + 0x23], rdx
movabs rdx, 0xe56e077453206383
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4ff17bf620f5b2e8
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd1c030b0c03171c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5190c040404081a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71617001b0a081a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2120d1c04161415
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a5e8b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x20
jge 0x4a5eb8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4a5edb
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4a5e6e
jmp 0x4a5ecf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1d
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004a5de0

Function at 0x4a6640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a673d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6127501471d43210
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6457423853204d61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3d72692f573e2030
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x200130108120d10
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf060f0016110c0b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd0f0f060f001611
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb15041202010506
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a66e0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4a670d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4a6730
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4a66bf
jmp 0x4a6724
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004a6640
Function at 0x4a6b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6c0c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5b4c720a666c6157
mov qword [rsp + 0x19], rdx
movabs rdx, 0x114748fa4a543b64
mov qword [rsp + 0x21], rdx
movabs rdx, 0x4d5b6961426e5a11
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6ef85d475833606f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a100f1300131c0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1206181915180b16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60a18100904130c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d0e1c1007040c1b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a6ba8
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a6bdc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x4a6bff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x1f
jb 0x4a6b8e
jmp 0x4a6bf3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1f
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004a6b00

Function at 0x4acc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4acd3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf633998d30b4329b
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x938c
movabs rdx, 0x405080809050209
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4000407
xor eax, eax
jmp 0x4acce0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4acd0d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4acd30
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4accc3
jmp 0x4acd24
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00454ec0
mov eax, edi
mov ecx, 0xa
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004acc80
Function at 0x4ad620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad706
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xfaf89a999402379e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x350402049c3238fa
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc020c040a0d00
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0b000c020c040a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0302050b070b06
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ad6a0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4ad6d2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ad6f7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0xf
jb 0x4ad682
jmp 0x4ad6eb
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004ad620

Function at 0x4addc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adeaa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xed363131ec9b9d31
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf55031ed363131ec
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x35e984d3f0378899
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0a070e0e0f0e11
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90310110c0a070e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10b0c020e090309
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ade4d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4ade7a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ade9d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4ade30
jmp 0x4ade91
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004addc0
Function at 0x4ae7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae8dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2d808032a731ce7f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6a84ff64a72d8080
mov qword [rsp + 0x22], rdx
movabs rdx, 0x737682bf8473ea37
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x14011107080e0f13
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc0a030a08091111
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x610120007110c0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb070307050e1409
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ae880
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4ae8ad
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ae8d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4ae85f
jmp 0x4ae8c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00454ec0
mov eax, edi
mov ecx, 0x15
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004ae7e0

Function at 0x4aea20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aeb1b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2a2938261a152a32
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x142210203233332a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3532043007381231
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x103050614070903
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe0c09120d020a0f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x4050e050e0c0912
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0c03030d091007
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aeab9
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4aeaeb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4aeb0e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x17
jb 0x4aea9f
jmp 0x4aeb02
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.004aea20
Function at 0x4afa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afb1d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x79ff3c746b993237
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0b1a63338318331
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8f40b0b1a6333831
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfe323133e4fb3303
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf09141014051506
mov qword [rsp + 0x36], rdx
movabs rdx, 0x19040f0914101405
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1119100712070609
mov qword [rsp + 0x40], rdx
movabs rdx, 0x204140606030614
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110e1405150d1205
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4afac0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x42]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4afaed
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4afb10
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4afa9d
jmp 0x4afb04
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004afa00
Function at 0x4b1540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b166c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xcbcdec3478d8e837
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x35cbcdec3478d8e8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6f3184ee31e9e6dc
mov qword [rsp + 0x26], rdx
movabs rdx, 0xebf132c5c6c7ed35
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5ae13be5376ccd91
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10b050d100e1e0e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1f09010b050d100e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x181d0a03021b1217
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140e061a19192002
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13071e0a02151019
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b1606
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x22
jge 0x4b163c
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x4b165f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x21
jb 0x4b15ec
jmp 0x4b1653
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.00443420
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00454ec0
mov eax, edi
mov ecx, 0x21
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004b1540
Function at 0x4b3740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b386c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6a4d62996e333936
mov qword [rsp + 0x40], rdx
movabs rdx, 0x38426c37305e3361
mov qword [rsp + 0x48], rdx
movabs rdx, 0x393668db6a743774
mov qword [rsp + 0x50], rdx
movabs rdx, 0x45708d35534b5737
mov qword [rsp + 0x58], rdx
movabs rdx, 0x45673133914d454c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d121b2223051a26
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20120814101e211f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1d20050813270713
mov qword [rsp + 0x28], rdx
movabs rdx, 0x61a03190503040d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x271915150a0d0e22
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b3806
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x28
jge 0x4b383c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x28
jae 0x4b385f
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 0x28
jb 0x4b37ec
jmp 0x4b3853
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x28
call fcn.00443420
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00454ec0
mov eax, edi
mov ecx, 0x28
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004b3740
Function at 0x4ba2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4ba3fd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x2b62342b502875e8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2035306c77f5f574
mov qword [rsp + 0x25], rdx
movabs rdx, 0xe9f9d32035306c77
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5e7a1cc86f50c0b4
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2045281c372a6925
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6515755dd616400e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x313181210240315
mov qword [rsp + 0x48], rdx
movabs rdx, 0x240e231903191415
mov qword [rsp + 0x50], rdx
movabs rdx, 0x210a2129041104
mov qword [rsp + 0x58], rdx
movabs rdx, 0x261f07030217211a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1404022525181d13
mov qword [rsp + 0x68], rdx
movabs rdx, 0x70e1b09171d1726
mov qword [rsp + 0x70], rdx
movabs rdx, 0x10280c2000271e1f
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4ba3a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x38
jge 0x4ba3cd
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x4ba3f0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x2b
jb 0x4ba37e
jmp 0x4ba3e4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2b
call fcn.00443420
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
call fcn.00454ec0
mov eax, edi
mov ecx, 0x2b
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004ba2a0