joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a5620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5728
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x27ccaef26a87111
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65725174dfc07254
mov qword [rsp + 0x26], rdx
movabs rdx, 0x91a465725174dfc0
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb22762616c694396
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5030719040b0111
mov qword [rsp + 0x38], rdx
movabs rdx, 0x801021202101113
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1100d000d050211
mov qword [rsp + 0x48], rdx
movabs rdx, 0x506060618070a07
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a56cb
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x4a56f8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a571b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a56ae
jmp 0x4a570f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00440c20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00450f00
mov eax, edi
mov ecx, 0x1a
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004a5620

Function at 0x4a6300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a63ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5055683d3b0b533a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e5e125a20505568
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5865555e59657374
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x614070b00100304
mov qword [rsp + 0x32], rdx
movabs rdx, 0x11100204120d0614
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1406030a0d0a0901
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a638d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x4a63ba
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a63dd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4a6370
jmp 0x4a63d1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00450f00
mov eax, edi
mov ecx, 0x15
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004a6300
Function at 0x4aa1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa2da
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6c6c636faffaed7b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xffc0fdb6f1abfa5f
mov qword [rsp + 0x23], rdx
movabs rdx, 0xde02856ff9ffc0fd
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6e656072f706f609
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd02091c0e031212
mov qword [rsp + 0x38], rdx
movabs rdx, 0x161809120c0f1517
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa081a0e00061315
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1061210131a131c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb0e0a1414031000
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4aa277
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x28
jge 0x4aa2a9
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4aa2cd
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x1d
jb 0x4aa25d
jmp 0x4aa2c1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00440c20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00450f00
mov eax, edi
mov ecx, 0x1d
call fcn.00450f00
nop
call fcn.0044ec80
nop
jmp fcn.004aa1c0

Function at 0x4abca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abd87
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c54342d646165d7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x104566554c6c5434
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4465745236462065
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60c0b0c00061000
mov qword [rsp + 0x32], rdx
movabs rdx, 0x60b10050c060c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf10090b0c141108
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4abd26
movzx r9d, byte [rsp + rsi + 0x1d]
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4abd57
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x15
jae 0x4abd7a
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, edx
cmp rsi, 0x15
jb 0x4abd10
jmp 0x4abd6e
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00450f00
mov eax, edi
mov ecx, 0x15
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004abca0
Function at 0x4ac860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac92c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20f40127fff8fc20
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x1e658573
movabs rdx, 0x6050104030b0609
mov qword [rsp + 0x28], rdx
movabs rdx, 0x200000102030100
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ac8c5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ac8fc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4ac91f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 0xc
jb 0x4ac8ab
jmp 0x4ac913
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00450f00
mov eax, edi
mov ecx, 0xc
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004ac860

Function at 0x4ac940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aca26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6254630d3e106fea
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5d5138263f597062
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4070a0e0d0b0c00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6020c04070a0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3030e09030c0d09
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ac9c0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xa]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4ac9f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4aca17
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xa]
cmp rsi, 0xf
jb 0x4ac9a2
jmp 0x4aca0b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f00
mov eax, edi
mov ecx, 0xf
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004ac940
Function at 0x4ad6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad7dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6068636f0d64702d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2057657061706174
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5b670e5020576570
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5e6e3b5d613c294f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1007141618191800
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1515130310071416
mov qword [rsp + 0x38], rdx
movabs rdx, 0x21a0e0e09061506
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1201010c11120b07
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1110108030a171b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ad780
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4ad7ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4ad7d0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4ad75d
jmp 0x4ad7c4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.00440c20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00450f00
mov eax, edi
mov ecx, 0x1c
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004ad6c0

Function at 0x4ada80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adbac
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x8da6f3978de2b1ec
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc2e6fa702b657420
mov qword [rsp + 0x20], rdx
movabs rdx, 0x910c28b85dfc8bfe
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc8f24ed6b1a30397
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1d190b10160b0e0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x150112010015020f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5141b16000b1916
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60b1c1e0e1d1a04
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e03100f191f1413
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5190d111c181707
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4adb46
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x30
jge 0x4adb7c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x4adb9f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0x20
jb 0x4adb2c
jmp 0x4adb93
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.00440c20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00450f00
mov eax, edi
mov ecx, 0x20
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004ada80
Function at 0x4adbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adcc8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x74f4b16cd8a86e09
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8725e5a0966f72c8
mov qword [rsp + 0x27], rdx
movabs rdx, 0x9b8725e5a0966f72
mov qword [rsp + 0x28], rdx
movabs rdx, 0xaf96506020d063dd
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6110013110e0307
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80f150d100e0611
mov qword [rsp + 0x40], rdx
movabs rdx, 0x215130f06161607
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0f0c0018051117
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4adc6b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x4adc98
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4adcbb
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4adc4e
jmp 0x4adcaf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00440c20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00450f00
mov eax, edi
mov ecx, 0x19
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004adbc0

Function at 0x4adce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4addb2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6592a4619de37896
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa699d5b7986592a4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8020c050002090a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30b060900000802
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4add4c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4add7e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4adda5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0xd
jb 0x4add32
jmp 0x4add95
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00450f00
mov eax, edi
mov ecx, 0xd
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004adce0
Function at 0x4aee20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aeef2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7432e0b8df00e47e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb56c717432e0b8df
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40204070200050a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa010a0103010801
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4aee8c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4aeebe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4aeee5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0xb
jb 0x4aee72
jmp 0x4aeed5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00450f00
mov eax, edi
mov ecx, 0xb
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004aee20

Function at 0x4aef00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aefcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2ebac4658b1b1d75
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc1d72e2ebac4658b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0a080506020102
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x903030705010a0a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4aef6f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4aef9c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4aefbf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4aef52
jmp 0x4aefb3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00450f00
mov eax, edi
mov ecx, 0xb
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004aef00
Function at 0x4afb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afc0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6341ea4026ad002a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30336341ea4026ad
mov qword [rsp + 0x20], rdx
movabs rdx, 0xcd4010612f1e2434
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100c0405020b0c11
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30808050b011009
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0f0b040003010a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4afbad
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4afbda
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4afbfd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4afb90
jmp 0x4afbf1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00450f00
mov eax, edi
mov ecx, 0x12
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004afb20

Function at 0x4b0600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b06e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xee54d5753467e152
mov qword [rsp + 0x18], rdx
movabs rdx, 0x47ba312dd1a26ed2
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe070d03060a050e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6010d0c0b05060f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7070a0b080d030f
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b0680
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x4b06b2
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b06d7
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 0x10
jb 0x4b0662
jmp 0x4b06cb
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f00
mov eax, edi
mov ecx, 0x10
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b0600
Function at 0x4b0700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b07dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd272c97351b76552
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x577116c4a00c7cea
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9020e0a0b08040a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc020d0a09020e0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0c0d0b04050e07
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b0780
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4b07ad
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b07d0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b0762
jmp 0x4b07c4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f00
mov eax, edi
mov ecx, 0x10
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004b0700

Function at 0x4b1900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b19cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6ea7704fe6727077
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6584eb74f26ea770
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10b0b0100000a06
mov qword [rsp + 0x28], rdx
movabs rdx, 0x803080001080a00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b196f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4b199c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b19bf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4b1952
jmp 0x4b19b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00450f00
mov eax, edi
mov ecx, 0xd
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b1900
Function at 0x4b19e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1add
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc527254f45212740
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x32079e3c527254f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3d88476f2974e108
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd06050b0b0e1205
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x13050a0c070f080c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x130213050a0c070f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3110b00000f0601
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b1a80
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4b1aad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b1ad0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4b1a5f
jmp 0x4b1ac4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00450f00
mov eax, edi
mov ecx, 0x14
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004b19e0

Function at 0x4b48e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b49a7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4449723916e5ccb3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x73db654449723916
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x301010706000004
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1000209
xor eax, eax
jmp 0x4b4948
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4b4977
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4b499a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b492b
jmp 0x4b498e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00450f00
mov eax, edi
mov ecx, 0xb
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b48e0
Function at 0x4b55c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b568c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x625f694c65753652
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x685b6a625f694c65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x206090a01030100
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80207030a060206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b562f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4b565c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b567f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b5612
jmp 0x4b5673
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00450f00
mov eax, edi
mov ecx, 0xb
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b55c0

Function at 0x4b5e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5f0a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x65ee22753974181e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3765ee2275397418
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5b73404af65c5674
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10301060b10080e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc00010301060b10
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa050d0c060a0005
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b5ead
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4b5eda
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b5efd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b5e90
jmp 0x4b5ef1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00450f00
mov eax, edi
mov ecx, 0x11
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b5e20