joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49e140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e267
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6880619f688a906d
mov qword [rsp + 0x44], rdx
movabs rdx, 0x702074426880619f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65757f617620459f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8b83a04089424120
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6e5469bf61846727
mov qword [rsp + 0x60], rdx
movabs rdx, 0x110c221909092006
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70d0105041a110c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x111d17020b051e05
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1d06111d1918091b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1e191d1a17092222
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x49e209
movzx r9d, byte [rsp + rsi + 0x44]
sub r9d, edx
lea edx, [r9 + 0x12]
mov byte [rsp + rdi + 0x44], dl
lea edx, [r8 + 0x12]
mov byte [rsp + rsi + 0x44], dl
add rax, 2
cmp rax, 0x26
jge 0x49e237
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x24
jae 0x49e25a
movzx r8d, byte [rsp + rdi + 0x44]
sub r8d, edx
cmp rsi, 0x24
jb 0x49e1ec
jmp 0x49e24e
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x24
call fcn.00447260
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.0045a040
mov eax, edi
mov ecx, 0x24
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0049e140

Function at 0x4a14c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a159d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x206e77ce2a5c26b3
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4919680f0abf206e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80a020009000d09
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1080c03080a0200
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8040c0d03030c00
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4a1540
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x43]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x43]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4a156d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a1590
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4a1522
jmp 0x4a1584
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.00447260
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045a040
mov eax, edi
mov ecx, 0xe
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.004a14c0
Function at 0x4a15c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a16aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x93748eb8a26665b3
mov qword [rsp + 0x37], rdx
movabs rdx, 0xa193748eb8a26665
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb003951ae66c6163
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40d050f0d030700
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x100c0d040f070307
mov qword [rsp + 0x27], rdx
movabs rdx, 0x4080e0f10040510
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4a164d
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x4a167a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a169d
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x4a1630
jmp 0x4a1691
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045a040
mov eax, edi
mov ecx, 0x11
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.004a15c0

Function at 0x4a5b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5c2a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x31745a1a2e6627f9
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4d4031745a1a2e66
mov qword [rsp + 0x38], rdx
movabs rdx, 0x456e6c41513a756a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1000a1109030c0c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd040009050a0707
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0107110b0e08
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a5bcd
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jge 0x4a5bfa
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a5c1d
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x4a5bb0
jmp 0x4a5c11
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045a040
mov eax, edi
mov ecx, 0x12
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.004a5b40
Function at 0x4a8620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x4a879b
push rbp
mov rbp, rsp
sub rsp, 0xc0
movabs rdx, 0x2ec995b9a79bfd98
mov qword [rsp + 0x73], rdx
movabs rdx, 0xc19a55007b4eaf4f
mov qword [rsp + 0x7b], rdx
movabs rdx, 0x6f2083656cc19a55
mov qword [rsp + 0x80], rdx
movabs rdx, 0xaf74a27356922084
mov qword [rsp + 0x88], rdx
movabs rdx, 0x6a74c4726fae6172
mov qword [rsp + 0x90], rdx
movabs rdx, 0x2088466fccd2d973
mov qword [rsp + 0x98], rdx
movabs rdx, 0x657639ac8060c26e
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x6d6c73e4c8df6195
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x6d7ea065a2e952d3
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x65eab261d3eb44b5
mov qword [rsp + 0xb8], rdx
movabs rdx, 0xc222637283d380c
mov qword [rsp + 0x1d], rdx
lea rdi, [rsp + 0x23]
lea rsi, [0x0059c17a]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045a65a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4a8734
movzx r9d, byte [rsp + rsi + 0x73]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x80]
mov byte [rsp + rdi + 0x73], dl
mov byte [rsp + rsi + 0x73], r8b
add rax, 2
cmp rax, 0x56
jge 0x4a8768
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x4d
jae 0x4a878e
movzx r8d, byte [rsp + rdi + 0x73]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x80]
nop
cmp rsi, 0x4d
jb 0x4a871a
jmp 0x4a8782
xor eax, eax
lea rbx, [rsp + 0x73]
mov ecx, 0x4d
call fcn.00447260
add rsp, 0xc0
pop rbp
ret
mov eax, esi
mov ecx, 0x4d
call fcn.0045a040
mov eax, edi
mov ecx, 0x4d
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.004a8620

Function at 0x4a87c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8907
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x2e8964c289708b4d
mov qword [rsp + 0x47], rdx
movabs rdx, 0x8d8c64204c787e83
mov qword [rsp + 0x4f], rdx
movabs rdx, 0x6c8d8c64204c787e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x696520b461766465
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20635e999e7561a7
mov qword [rsp + 0x60], rdx
movabs rdx, 0x88b5796160876269
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe14051e26222715
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd1f0f220b130428
mov qword [rsp + 0x25], rdx
movabs rdx, 0x3240d1f0f220b13
mov qword [rsp + 0x27], rdx
movabs rdx, 0x9131d091908181c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x8260913190f0505
mov qword [rsp + 0x37], rdx
movabs rdx, 0x614182823012715
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x4a88a7
movzx r9d, byte [rsp + rsi + 0x47]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x47], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x47], dl
add rax, 2
cmp rax, 0x2a
jge 0x4a88d7
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x29
jae 0x4a88fa
movzx r8d, byte [rsp + rdi + 0x47]
sub r8d, edx
cmp rsi, 0x29
jb 0x4a888a
jmp 0x4a88ee
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x29
call fcn.00447260
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.0045a040
mov eax, edi
mov ecx, 0x29
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.004a87c0
Function at 0x4a8e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8f98
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xebde598b497061c3
mov qword [rsp + 0x48], rdx
movabs rdx, 0xef0d61f16c7710ce
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf065f0196f209d88
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2064ab9573778e00
mov qword [rsp + 0x60], rdx
movabs rdx, 0x726f74e2e9de74e1
mov qword [rsp + 0x68], rdx
movabs rdx, 0x6051106111a0600
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa10041406002019
mov qword [rsp + 0x20], rdx
movabs rdx, 0x221011220807091c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10180b0b2000230f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc14172400180e0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x151d0b24091a180a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a8f35
movzx r9d, byte [rsp + rsi + 0x48]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x48], dl
mov byte [rsp + rsi + 0x48], r8b
add rax, 2
cmp rax, 0x30
jge 0x4a8f68
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4a8f8b
movzx r8d, byte [rsp + rdi + 0x48]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
nop
cmp rsi, 0x28
jb 0x4a8f1b
jmp 0x4a8f7f
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x28
call fcn.00447260
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.0045a040
mov eax, edi
mov ecx, 0x28
call fcn.0045a040
nop
call fcn.00457d60
nop dword [rax]
jmp fcn.004a8e60
Function at 0x4a8fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4a917b
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0xfb5cdb25f024651c
mov qword [rsp + 0x64], rdx
movabs rdx, 0x2b6f206c6ce656df
mov qword [rsp + 0x6c], rdx
movabs rdx, 0x666972202b6f206c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x6c612e38a563ce6c
mov qword [rsp + 0x78], rdx
movabs rdx, 0xd21612658b4faa00
mov qword [rsp + 0x80], rdx
movabs rdx, 0x6c582872fb70b025
mov qword [rsp + 0x88], rdx
movabs rdx, 0xf2e00991cfa2d552
mov qword [rsp + 0x90], rdx
movabs rdx, 0x65843f08569477dd
mov qword [rsp + 0x98], rdx
movabs rdx, 0x27180204081e2b1d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x311725292a242a2c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2f25311725292a24
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1f122d192f22190f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x83034052b212b27
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1c07182c18002933
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x120a31352d2d0912
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1524290f383a2439
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x323836070f061d0a
mov qword [rsp + 0x54], rdx
movabs rdx, 0x30023311d0f2e1f
mov qword [rsp + 0x5c], rdx
xor eax, eax
jmp 0x4a9112
movzx r9d, byte [rsp + rsi + 0x64]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x64], dl
mov byte [rsp + rsi + 0x64], r8b
add rax, 2
cmp rax, 0x4a
jge 0x4a9148
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3c
jae 0x4a916e
movzx r8d, byte [rsp + rdi + 0x64]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
nop dword [rax]
cmp rsi, 0x3c
jb 0x4a90f8
jmp 0x4a9162
xor eax, eax
lea rbx, [rsp + 0x64]
mov ecx, 0x3c
call fcn.00447260
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x3c
call fcn.0045a040
mov eax, edi
mov ecx, 0x3c
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.004a8fc0
Function at 0x4aa420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa547
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x55a5637c6c66656f
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x2055a5637c6c6665
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4769206a2e723271
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2057ab6f725d8c59
mov qword [rsp + 0x50], rdx
movabs rdx, 0x9a838061906a6671
mov qword [rsp + 0x58], rdx
movabs rdx, 0x191b0c0717111110
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2016111e191b0c07
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1311000606140912
mov qword [rsp + 0x27], rdx
movabs rdx, 0x131f20041910091c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1420090d1f101b0a
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4aa4e9
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 + 0x1b]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 + 0x1b]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x24
jge 0x4aa517
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x4aa53a
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x21
jb 0x4aa4cc
jmp 0x4aa52e
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x21
call fcn.00447260
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.0045a040
mov eax, edi
mov ecx, 0x21
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.004aa420

Function at 0x4aa560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa67d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf69737d51be693e0
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x63e7c55df47f7626
mov qword [rsp + 0x47], rdx
movabs rdx, 0x4d63e7c55df47f76
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb2657b811cb6b465
mov qword [rsp + 0x50], rdx
movabs rdx, 0x40307050f160d0a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1811070504030705
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x604180b00021416
mov qword [rsp + 0x27], rdx
movabs rdx, 0x10130615130e010e
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1610130d060f1512
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4aa620
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4aa64d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4aa670
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4aa5fd
jmp 0x4aa664
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00447260
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045a040
mov eax, edi
mov ecx, 0x19
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.004aa560
Function at 0x4ac080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac16c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2ea6b08085a76572
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x927c2ea6b08085a7
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57cc6c942e65726a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x906100b06090205
mov qword [rsp + 0x18], rdx
movabs rdx, 0x302090e0e0b0906
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x110a110808090504
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4ac10a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ac13c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ac15f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 0x12
jb 0x4ac0f0
jmp 0x4ac153
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00447260
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045a040
mov eax, edi
mov ecx, 0x12
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.004ac080

Function at 0x4b2540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b263b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x656f4cd1d36cfc66
mov qword [rsp + 0x35], rdx
movabs rdx, 0xb593d2656f4cd1d3
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1685dcc4da20cb6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1050a10010a0411
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x10120a0312090108
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf0510120a031209
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1012110909030e0c
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4b25d9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4b260b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b262e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0x13
jb 0x4b25bf
jmp 0x4b2622
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045a040
mov eax, edi
mov ecx, 0x13
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.004b2540
Function at 0x4bda20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdadd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf7fa0469343a3038
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6465
movabs rdx, 0x307000206070305
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x601
xor eax, eax
jmp 0x4bda80
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4bdaad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4bdad0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4bda62
jmp 0x4bdac4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045a040
mov eax, edi
mov ecx, 0xa
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.004bda20

Function at 0x4bde40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdf3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdfe7ec4dece5eff0
mov qword [rsp + 0x39], rdx
movabs rdx, 0x8d3104e0e02eebdf
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb5ee6dea5ca1dd2e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140a001514160c04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2110b10160e0113
mov qword [rsp + 0x25], rdx
movabs rdx, 0x305071202110b10
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1607060e160c0208
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4bded9
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4bdf0b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4bdf2e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x17
jb 0x4bdebf
jmp 0x4bdf22
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045a040
mov eax, edi
mov ecx, 0x17
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.004bde40
Function at 0x4be240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x2db2dd211d30e9dd
mov qword [rsp + 0x28], rdx
movabs rdx, 0x302020406060504
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 7
xor eax, eax
jmp 0x4be294
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x4be2c8
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x4be305
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x52]
nop dword [rax + rax]
cmp rbx, 8
jb 0x4be27a
jmp 0x4be2f7
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x4be2e1
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x4be2d5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0045a040
mov eax, esi
mov ecx, 8
call fcn.0045a040
nop
int3

Function at 0x4bf380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf4c7
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x5073ce6cc0646461
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6ea97923696deca1
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6fa6dff1be0a0cdf
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa5790c36b8da2072
mov qword [rsp + 0x68], rdx
movabs rdx, 0xa03fd5874ed0a2f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x821110e1f162709
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x21240821110e1f16
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1d13081525210704
mov qword [rsp + 0x28], rdx
movabs rdx, 0x15120519221c261c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x111a160c141b030e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b2720080e032511
mov qword [rsp + 0x40], rdx
movabs rdx, 0x41919101d140407
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bf467
movzx r9d, byte [rsp + rsi + 0x50]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x50], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x50], dl
add rax, 2
cmp rax, 0x32
jge 0x4bf497
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x28
jae 0x4bf4ba
movzx r8d, byte [rsp + rdi + 0x50]
sub r8d, edx
cmp rsi, 0x28
jb 0x4bf44a
jmp 0x4bf4ae
xor eax, eax
lea rbx, [rsp + 0x50]
mov ecx, 0x28
call fcn.00447260
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.0045a040
mov eax, edi
mov ecx, 0x28
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.004bf380
Function at 0x4c3300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c342c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x2d255a0f65d57517
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf2e1f367100a20af
mov qword [rsp + 0x50], rdx
movabs rdx, 0xedddf4130d9689e9
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6ea69c6d6f75eabd
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb0804131e060a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x20412180a170a13
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7130704100f0204
mov qword [rsp + 0x28], rdx
movabs rdx, 0x140d040411131d0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb1d1d1a15041318
mov qword [rsp + 0x38], rdx
movabs rdx, 0x161d190d170e1705
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c33c6
movzx r9d, byte [rsp + rsi + 0x48]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x48], dl
mov byte [rsp + rsi + 0x48], r8b
add rax, 2
cmp rax, 0x2e
jge 0x4c33fc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x4c341f
movzx r8d, byte [rsp + rdi + 0x48]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
cmp rsi, 0x20
jb 0x4c33ac
jmp 0x4c3413
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.00447260
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045a040
mov eax, edi
mov ecx, 0x20
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.004c3300

Function at 0x4c3b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3c2c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7472778c6b738c71
mov qword [rsp + 0x35], rdx
movabs rdx, 0x2072787472778c6b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7565648f35776180
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90c12010f040e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x10e0e0f06050701
mov qword [rsp + 0x25], rdx
movabs rdx, 0x50b0e00060d080b
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4c3bca
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c3bfc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c3c1f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x13
jb 0x4c3bb0
jmp 0x4c3c13
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045a040
mov eax, edi
mov ecx, 0x13
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.004c3b40