joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b1900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1a08
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6d750433740d650b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2a575001747202ee
mov qword [rsp + 0x25], rdx
movabs rdx, 0x2e03612a57500174
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65375774532e23fa
mov qword [rsp + 0x30], rdx
movabs rdx, 0x130c0d0f110d0908
mov qword [rsp + 0x38], rdx
movabs rdx, 0x518020c00020515
mov qword [rsp + 0x40], rdx
movabs rdx, 0x212131909191314
mov qword [rsp + 0x48], rdx
movabs rdx, 0x151502090415120e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b19ab
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x20
jge 0x4b19d8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4b19fb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4b198e
jmp 0x4b19ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.004518a0
mov eax, edi
mov ecx, 0x1b
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b1900

Function at 0x4b1d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1e0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x43493bf57472421e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x40695769624e5b43
mov qword [rsp + 0x20], rdx
movabs rdx, 0x564f4168715b2e66
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5000c1504000e15
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf16110810000501
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90f0a120a140f06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b1dad
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x4b1dda
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b1dfd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4b1d90
jmp 0x4b1df1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004518a0
mov eax, edi
mov ecx, 0x17
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b1d20
Function at 0x4b22a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b237d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2da6de1e5736ef5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf272f3cb7c866d6f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40f0f0c0c00030e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa04040f0f0c0c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd040306070a0b03
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b2320
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4b234d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b2370
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b2302
jmp 0x4b2364
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004518a0
mov eax, edi
mov ecx, 0x10
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004b22a0

Function at 0x4b2600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b26ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x546f5b6554555237
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5f546f5b65545552
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x65324d466c735b32
mov qword [rsp + 0x24], rdx
movabs rdx, 0x501080e00090f03
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30905020501080e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80a070c0c010705
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b268d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4b26ba
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b26dd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b2670
jmp 0x4b26d1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004518a0
mov eax, edi
mov ecx, 0x11
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b2600
Function at 0x4b2700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b27e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8a7092949974d047
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x84be6e9c728c868a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0b0b010e050d08
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd030a0b0b010e05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10d080a040d0709
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b2780
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b27b2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b27d7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0xf
jb 0x4b2762
jmp 0x4b27cb
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004518a0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b2700

Function at 0x4b3920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b39ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf0a3650b61977293
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x68700c658eeff0a3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x908040b0d0c0002
mov qword [rsp + 0x28], rdx
movabs rdx, 0x802000c070d060d
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b398f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x7b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x7b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4b39bc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b39df
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4b3972
jmp 0x4b39d3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004518a0
mov eax, edi
mov ecx, 0xe
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b3920
Function at 0x4b5f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5fec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x65723e11433b2055
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x502a2e65723e1143
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2349337365123bea
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8040b04100b05
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1210051101090008
mov qword [rsp + 0x38], rdx
movabs rdx, 0x910010c110d1202
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b5f8a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xb]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b5fbc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b5fdf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xb]
cmp rsi, 0x13
jb 0x4b5f70
jmp 0x4b5fd3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004518a0
mov eax, edi
mov ecx, 0x13
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b5f00

Function at 0x4b6400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b64ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x41929edeabceeb9a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x747441929edeabce
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1653d97da97f69af
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10f020f11060a10
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0a0404000c030e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50406050f020d04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b648d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4b64ba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b64dd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b6470
jmp 0x4b64d1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004518a0
mov eax, edi
mov ecx, 0x12
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b6400
Function at 0x4b6e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6f27
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1208a6710374659b
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x136f9771
movabs rdx, 0xb060306080904
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40b090705040009
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b6ec8
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x7a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x7a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4b6ef7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4b6f1a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4b6eab
jmp 0x4b6f0e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004518a0
mov eax, edi
mov ecx, 0xc
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b6e60

Function at 0x4b6f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b701d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe3cc3adfecc1e947
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4f65d561c6cb7449
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60f020b0d0d0f08
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70a060f020b0d0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x403080102010405
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b6fc0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4b6fed
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b7010
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b6fa2
jmp 0x4b7004
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004518a0
mov eax, edi
mov ecx, 0x10
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004b6f40
Function at 0x4b7200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b72cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x656372566974e6e3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x73c5826954ef5365
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50303010304000d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x504030908090c03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b726f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4b729c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b72bf
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4b7252
jmp 0x4b72b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004518a0
mov eax, edi
mov ecx, 0xf
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b7200

Function at 0x4b72e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b73ec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65c9e8d6e4e06547
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc6ef5e616d6fdce9
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd8c6ef5e616d6fdc
mov qword [rsp + 0x26], rdx
movabs rdx, 0x28757458ce51bb6f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x130f080512140d13
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe02100d120d1815
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x9140e02100d120d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x306041815090c03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b7388
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4b73bc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4b73df
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0x19
jb 0x4b736e
jmp 0x4b73d3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004518a0
mov eax, edi
mov ecx, 0x19
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b72e0
Function at 0x4b77c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b78bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x37749e825698dee1
mov qword [rsp + 0x19], rdx
movabs rdx, 0x97417b7469dd6d37
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70e9695765c57046
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc150407020e0507
mov qword [rsp + 0x30], rdx
movabs rdx, 0x151605030b010e02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1100b1500030304
mov qword [rsp + 0x40], rdx
movabs rdx, 0x501051311090715
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b7859
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x4b788b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b78ae
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x17
jb 0x4b783f
jmp 0x4b78a2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004518a0
mov eax, edi
mov ecx, 0x17
call fcn.004518a0
nop
nop dword [rax + rax]
call fcn.0044f620
jmp fcn.004b77c0

Function at 0x4b9680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b974c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc06e0f3be93a6545
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x3b32022c
movabs rdx, 0xa000802030a0700
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5040b0a0b090a00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b96e5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b971c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4b973f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0xc
jb 0x4b96cb
jmp 0x4b9733
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004518a0
mov eax, edi
mov ecx, 0xc
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b9680
Function at 0x4b9a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9ad8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x17b2167cc6fc651a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7050306070403
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050402
xor eax, eax
jmp 0x4b9a79
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x4b9aa8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4b9acb
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop
cmp rsi, 8
jb 0x4b9a5c
jmp 0x4b9abf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004518a0
mov eax, edi
mov ecx, 8
call fcn.004518a0
nop
call fcn.0044f620
nop dword [rax]
jmp fcn.004b9a20

Function at 0x4b9e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9fa7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x4311e26946505632
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x426f4311e2694650
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4e0e3e531e572470
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3513633b6669244d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x73654b6fc1410d2c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd131019181b1b1d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120e091a021c061c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130b0f05050119
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b131f0c160c050d
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc02090f000d180f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4b9f49
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x28
jge 0x4b9f77
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x22
jae 0x4b9f9a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x22
jb 0x4b9f2c
jmp 0x4b9f8e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.004518a0
mov eax, edi
mov ecx, 0x22
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004b9e80
Function at 0x4ba400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba4e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74b6b29ff8a26554
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2a3c650eaaa8fee9
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa050c02040b0605
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50b0e040f050a05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90803060c0b0406
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ba480
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4ba4b2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ba4d7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x10
jb 0x4ba462
jmp 0x4ba4cb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004518a0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004ba400

Function at 0x4ba500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba5dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa1befec9b9fea1c3
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb5c7c6c9d324bca1
mov qword [rsp + 0x26], rdx
movabs rdx, 0x602080d05070e03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9060602080d0507
mov qword [rsp + 0x30], rdx
movabs rdx, 0x700040a060c010b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ba580
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4ba5ad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ba5d0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4ba562
jmp 0x4ba5c4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004518a0
mov eax, edi
mov ecx, 0xf
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004ba500
Function at 0x4bb680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb747
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8119773aee59c72
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x176c0bfc
movabs rdx, 0x309080200020501
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6090b0705010309
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bb6e8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4bb717
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4bb73a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4bb6cb
jmp 0x4bb72e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004518a0
mov eax, edi
mov ecx, 0xc
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004bb680

Function at 0x4bb760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb83d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3e42e93d55742561
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe9433d4a533f3f66
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5010f0501050a09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10b000d07040c0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe070b0c0a040503
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bb7e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4bb80d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bb830
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4bb7c2
jmp 0x4bb824
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004518a0
mov eax, edi
mov ecx, 0x10
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004bb760