joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a57a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5867
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x322f45291a72ec45
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x4646ee5a
movabs rdx, 0x4060b0a04010905
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x400030801000501
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4a5808
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4a5837
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4a585a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4a57eb
jmp 0x4a584e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456440
mov eax, edi
mov ecx, 0xc
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004a57a0

Function at 0x4a8be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8cca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2093f2ce6facccb5
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1714babc532093f2
mov qword [rsp + 0x38], rdx
movabs rdx, 0x226dcd543264ac0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0406000e050d02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x100c0b120a0e0c04
mov qword [rsp + 0x23], rdx
movabs rdx, 0x12010c0209041412
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4a8c6d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jge 0x4a8c9a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a8cbd
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4a8c50
jmp 0x4a8cb1
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456440
mov eax, edi
mov ecx, 0x15
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004a8be0
Function at 0x4a9d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9e7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e615c0818e66cae
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xff1abd74f1cb6e61
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf66d5d9ce2640f61
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb15030b02050404
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x409151111130f08
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0b0c15020b1300
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x51208030b041504
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4a9e19
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a9e4b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a9e6e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0x16
jb 0x4a9dff
jmp 0x4a9e62
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456440
mov eax, edi
mov ecx, 0x16
call fcn.00456440
nop
nop dword [rax + rax]
call fcn.00454160
jmp fcn.004a9d80

Function at 0x4abfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac09d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x33c2ea202de6db05
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6b1f6174e14433c2
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd384403b20037261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10151402010d06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd0c03041305090d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x813010601150d0c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1412080110060207
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4ac040
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4ac06d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ac090
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4ac01f
jmp 0x4ac084
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456440
mov eax, edi
mov ecx, 0x16
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.004abfa0
Function at 0x4ac0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac1bb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3096535144d33043
mov qword [rsp + 0x36], rdx
movabs rdx, 0xdd3a3096535144d3
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9b0e3544dd1071e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc10091104060d0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x702020208090c04
mov qword [rsp + 0x24], rdx
movabs rdx, 0x103070202020809
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0d100a0711070f
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4ac159
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4ac18b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ac1ae
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x12
jb 0x4ac13f
jmp 0x4ac1a2
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456440
mov eax, edi
mov ecx, 0x12
call fcn.00456440
nop
nop dword [rax + rax]
call fcn.00454160
jmp fcn.004ac0c0

Function at 0x4ad460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad54c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd5b1b8663add6150
mov qword [rsp + 0x33], rdx
movabs rdx, 0xb26eb10ebed5b1b8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65a9fb6dc0bc6eb0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11020e1002090703
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc13020f07091102
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa06050f120a080d
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4ad4ea
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ad51c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ad53f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x15
jb 0x4ad4d0
jmp 0x4ad533
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456440
mov eax, edi
mov ecx, 0x15
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004ad460
Function at 0x4b0100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b01fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x28416966174fc650
mov qword [rsp + 0x38], rdx
movabs rdx, 0xcee761742e33d2da
mov qword [rsp + 0x40], rdx
movabs rdx, 0x37060af8273d7261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14070b0108130f08
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90f150a1617030b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe0b17120f0e0215
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80f0614130f0308
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b01a0
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4b01cd
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4b01f0
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x4b017f
jmp 0x4b01e4
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456440
mov eax, edi
mov ecx, 0x18
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.004b0100

Function at 0x4b0220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b032c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x686b3f17532c1e45
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x7c7976727e624194
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2b2861433d6e7c79
mov qword [rsp + 0x48], rdx
movabs rdx, 0x656269546f717261
mov qword [rsp + 0x50], rdx
movabs rdx, 0x181415190e080f0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd06050f0c0e100f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x181014100a1c0d06
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120f02010408110f
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4b02c8
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4b02fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x4b031f
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 0x1e
jb 0x4b02ae
jmp 0x4b0313
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00456440
mov eax, edi
mov ecx, 0x1e
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004b0220
Function at 0x4b2b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2c4c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb54165274a64694d
mov qword [rsp + 0x37], rdx
movabs rdx, 0x32613af239efee35
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6432613af239efee
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0ec2aefebcf72e3
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0311090b17140a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x60f090708180c0f
mov qword [rsp + 0x23], rdx
movabs rdx, 0x11080413060f0907
mov qword [rsp + 0x27], rdx
movabs rdx, 0x15140a1609060406
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4b2be8
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4b2c1c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4b2c3f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0x19
jb 0x4b2bce
jmp 0x4b2c33
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456440
mov eax, edi
mov ecx, 0x19
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004b2b40

Function at 0x4b2f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b303a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xdc611c3bb0221694
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6e92e8a4ce6c611d
mov qword [rsp + 0x47], rdx
movabs rdx, 0xc06e92e8a4ce6c61
mov qword [rsp + 0x48], rdx
movabs rdx, 0x656d73b8d5b64d1f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13160d130e00100c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1107141013160d13
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x500050e04040311
mov qword [rsp + 0x27], rdx
movabs rdx, 0x130d10050212110c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x108150b020d020b
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4b2fd7
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x24
jge 0x4b3009
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4b302d
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x19
jb 0x4b2fbd
jmp 0x4b3021
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456440
mov eax, edi
mov ecx, 0x19
call fcn.00456440
nop
call fcn.00454160
nop
jmp fcn.004b2f20
Function at 0x4b3b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3c1b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x626f576c86819641
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x506e615353626f57
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7b15695720856b5f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12091405020e0103
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x90f0605050f120d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x3010102090f0605
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x140c040911030713
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4b3bb9
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4b3beb
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b3c0e
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0x15
jb 0x4b3b9f
jmp 0x4b3c02
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456440
mov eax, edi
mov ecx, 0x15
call fcn.00456440
nop
nop dword [rax + rax]
call fcn.00454160
jmp fcn.004b3b20

Function at 0x4b4440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b453b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xed48fbe2e0c5149
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x206ebceb0ed48fbe
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65c0ba2c1764c874
mov qword [rsp + 0x48], rdx
movabs rdx, 0x307070c0b080506
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50d030203101104
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70d12010b0f050d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0803070b090c12
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4b44d9
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4b450b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b452e
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
cmp rsi, 0x14
jb 0x4b44bf
jmp 0x4b4522
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456440
mov eax, edi
mov ecx, 0x14
call fcn.00456440
nop
nop dword [rax + rax]
call fcn.00454160
jmp fcn.004b4440
Function at 0x4b4680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b476a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5320776975733e5e
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x656f695320776975
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3176209b72819069
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10c050d0e090909
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1000100010c050d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x50307110f050c0b
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4b470d
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x14
jge 0x4b473a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b475d
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b46f0
jmp 0x4b4751
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456440
mov eax, edi
mov ecx, 0x13
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004b4680

Function at 0x4b56a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b578c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x614f80917a73844f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x496e614f80917a73
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6ec779b8bed08785
mov qword [rsp + 0x38], rdx
movabs rdx, 0x51104060e030c04
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf100d0905110406
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa030b090103010f
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4b572a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4b575c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b577f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x12
jb 0x4b5710
jmp 0x4b5773
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456440
mov eax, edi
mov ecx, 0x12
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004b56a0
Function at 0x4b7840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b792a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7438c01c79f66f37
mov qword [rsp + 0x35], rdx
movabs rdx, 0x64ebf37438c01c79
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc16d3a2e4a64ba19
mov qword [rsp + 0x40], rdx
movabs rdx, 0x509100209120c0f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x120e100e0f0b0509
mov qword [rsp + 0x25], rdx
movabs rdx, 0x80e0b000b090406
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4b78cd
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x4b78fa
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b791d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b78b0
jmp 0x4b7911
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456440
mov eax, edi
mov ecx, 0x13
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004b7840

Function at 0x4b9540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b962c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x115f1279be6f0741
mov qword [rsp + 0x34], rdx
movabs rdx, 0x21136174115f1279
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1cfe690d83ddeffa
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7030b050e0f040f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc070113120e100d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30a030404030604
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4b95ca
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b95fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b961f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0x14
jb 0x4b95b0
jmp 0x4b9613
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456440
mov eax, edi
mov ecx, 0x14
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004b9540
Function at 0x4bbe00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbefd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x61683b61af4701dc
mov qword [rsp + 0x39], rdx
movabs rdx, 0x3a4c0b0553371661
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf6de712266448a6
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3090f000e14030f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x516000b13000d10
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf120e0008010516
mov qword [rsp + 0x29], rdx
movabs rdx, 0x2010c050c12080f
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4bbea0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4bbecd
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4bbef0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4bbe7f
jmp 0x4bbee4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456440
mov eax, edi
mov ecx, 0x17
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.004bbe00

Function at 0x4bbf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc01d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x706f7275bdb3c0e0
mov qword [rsp + 0x39], rdx
movabs rdx, 0xbc0b8d12fb20c370
mov qword [rsp + 0x40], rdx
movabs rdx, 0xbad307facf7672d4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x101020e130a0c03
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x160c00030b16110b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x14160b0e1502160c
mov qword [rsp + 0x29], rdx
movabs rdx, 0xf0d1214080f120f
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4bbfc0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4bbfed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4bc010
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4bbf9f
jmp 0x4bc004
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456440
mov eax, edi
mov ecx, 0x17
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.004bbf20