joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a91e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a92c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2bd9642d232adb32
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc624376f43201e2b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0c0007030a0d04
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6030c0c0007030a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe060e0608030102
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a9260
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4a9292
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4a92b7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0xf
jb 0x4a9242
jmp 0x4a92ab
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a91e0

Function at 0x4a9620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a972c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x616973652210c57b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcdd39d186fd02aff
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6973cdd39d186fd0
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65cbc3745e030163
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa150a0002180309
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140f0f0612170018
mov qword [rsp + 0x40], rdx
movabs rdx, 0x617060108130e0a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe00000d1412060c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a96c8
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a96fc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4a971f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0x1a
jb 0x4a96ae
jmp 0x4a9713
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a9620
Function at 0x4a9740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a982c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6ce3256f35e5f670
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xee20a76f4afb6ce3
mov qword [rsp + 0x20], rdx
movabs rdx, 0xdce2f661ec8861d8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10d080b11130106
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd02020909100e14
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1510100d10050310
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a97ca
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a97fc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a981f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x72]
cmp rsi, 0x16
jb 0x4a97b0
jmp 0x4a9813
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a9740

Function at 0x4a9b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9c3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc2250f8526740586
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xdc2036ad61b37225
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4dc9b772cf032d65
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x116060d0f081711
mov qword [rsp + 0x34], rdx
movabs rdx, 0x150c0d0504060300
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x17071312150c0d05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130a160d0d11000f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a9bd9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4a9c0b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a9c2e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 0x18
jb 0x4a9bbf
jmp 0x4a9c22
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004a9b40
Function at 0x4ac140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac23b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8e393761b6d170f0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x382f94e42c206e8e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x64303f7221ef4321
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10140c15060b0003
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1503000d050e1102
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x20f1503000d050e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6110a0303121207
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ac1d9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4ac20b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ac22e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x17
jb 0x4ac1bf
jmp 0x4ac222
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004ac140

Function at 0x4af2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af3bd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe59df4e768f0f273
mov qword [rsp + 0x19], rdx
movabs rdx, 0x727a720179e59df4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x401070704020703
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80b040107070402
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5080b0109060706
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4af360
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4af38d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4af3b0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4af342
jmp 0x4af3a4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004af2e0
Function at 0x4afbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afcaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7a7a74636582747b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x767b776565176517
mov qword [rsp + 0x38], rdx
movabs rdx, 0x707b9c6eb7658963
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90a0306080f0717
mov qword [rsp + 0x18], rdx
movabs rdx, 0x160d000e0d130617
mov qword [rsp + 0x20], rdx
movabs rdx, 0x211150203160708
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4afc4d
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x12]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x12]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x4afc7a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4afc9d
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x4afc30
jmp 0x4afc91
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004afbc0

Function at 0x4b0080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b015d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20040b0950c6f92
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfb8cf20475fd0200
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4080d06050c0b0a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc030b0b04080d06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50b07020c0c0005
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b0100
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4b012d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b0150
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4b00e2
jmp 0x4b0144
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b0080
Function at 0x4b0580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b069a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8fc369ca3b76d01a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x21de39218ac93532
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2b21de39218ac935
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6b26d56c6c6563c0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0d08100d100e09
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc17030b0b0d0810
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd1616070814030f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x806160a060a000f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x701090614040611
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b0637
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x4b0669
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4b068d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0x19
jb 0x4b061d
jmp 0x4b0681
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004b0580

Function at 0x4b0fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b10a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdb70fa706cd9a4a0
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x5b6cda96
movabs rdx, 0x20909070b080508
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1010b0907000209
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b1048
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4b1077
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4b109a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4b102b
jmp 0x4b108e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b0fe0
Function at 0x4b1b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1bfd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6458c55f5fd373d6
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x68d9
movabs rdx, 0x6040206080506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9040906
xor eax, eax
jmp 0x4b1ba0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4b1bcd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b1bf0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b1b83
jmp 0x4b1be4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b1b40

Function at 0x4b23c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b248c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e65a4a4927472aa
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x909bdf28ccb06e65
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0c0d09050b050a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30805040b040002
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b242f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4b245c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b247f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4b2412
jmp 0x4b2473
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b23c0
Function at 0x4b4720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b481d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4366657370727866
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4675559170565643
mov qword [rsp + 0x22], rdx
movabs rdx, 0x617883597f875861
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x140b0c0d06131016
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe00030a15060601
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb0904150b140e00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8040c1616110b12
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b47c0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4b47ed
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b4810
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x4b479f
jmp 0x4b4804
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b4720

Function at 0x4b4ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4bbb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd8bed1383cb665e0
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7439bfe4d8bed138
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57dc38b43cd0cfe3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20a0e1000060512
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20a0d0c0d110402
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa08020a0d0c0d11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2070809030f030f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b4b59
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4b4b8b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b4bae
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7d]
cmp rsi, 0x14
jb 0x4b4b3f
jmp 0x4b4ba2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004b4ac0
Function at 0x4b4be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4cfd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x692a59e34af427f8
mov qword [rsp + 0x18], rdx
movabs rdx, 0x241b4a7250431223
mov qword [rsp + 0x20], rdx
movabs rdx, 0x216843fb38db0824
mov qword [rsp + 0x28], rdx
movabs rdx, 0xca3e236c36503069
mov qword [rsp + 0x30], rdx
movabs rdx, 0x21f111d121f02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1f0d081b09021714
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf1e1901040f1d13
mov qword [rsp + 0x48], rdx
movabs rdx, 0x513190110060e06
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2031b0e1e17060b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b4ca0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4b4ccd
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4b4cf0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x4b4c7d
jmp 0x4b4ce4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00451880
mov eax, edi
mov ecx, 0x20
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b4be0

Function at 0x4b62a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b638c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7953fe85f5e6059b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6fed787953fe85f5
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd9ca8a69ad638fad
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120903050109020b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe04110b03010505
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12080c100b091100
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b632a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b635c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b637f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x13
jb 0x4b6310
jmp 0x4b6373
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b62a0
Function at 0x4b8a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8b2a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6578727e773d656b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e6578727e773d65
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64784b6e5c6a6a4a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0b060d06100c0c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90a02000f0b060d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb040e030903
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b8acd
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4b8afa
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b8b1d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b8ab0
jmp 0x4b8b11
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b8a40

Function at 0x4bca40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcb26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1d466e046d393d54
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x530cca633172e742
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb070e0f090b0606
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0b08070b070e0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf020f010d010104
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bcac0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4bcaf2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bcb17
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x10
jb 0x4bcaa2
jmp 0x4bcb0b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bca40
Function at 0x4bdd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bddd8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8a4595ab9163848a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x500070401050301
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1010707
xor eax, eax
jmp 0x4bdd76
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4bdda8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bddcb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x21]
cmp rsi, 8
jb 0x4bdd5c
jmp 0x4bddbf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004bdd20

Function at 0x4bde00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdeec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x736589c67c745b64
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x74b66696736589c6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x717a637f9f6b636f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb110f131205040f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa0a100709000b11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10313040a080313
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bde8a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4bdebc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bdedf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x14
jb 0x4bde70
jmp 0x4bded3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bde00