joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ae3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae4ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6cdb6ff7b3e45ad2
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c69d1205d6cdb6f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xdcd274738502f3ee
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe010403040f0d0e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa13030800030e01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60114080302100e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ae44a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ae47c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ae49f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0x15
jb 0x4ae430
jmp 0x4ae493
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ae3c0

Function at 0x4aea80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aeb4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2068596a6e206f5a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5559656966706320
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0d0409000a0e08
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8000505080a0903
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4aeaef
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4aeb1c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4aeb3f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4aead2
jmp 0x4aeb33
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004aea80
Function at 0x4aede0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aeedd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5847f2651a39544d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x346946205e5847f2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5b6c5b6e6c542047
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1010502060c0a0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0705020c140503
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2120f0705020c14
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80012070c081007
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4aee80
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4aeead
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4aeed0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4aee5f
jmp 0x4aeec4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004aede0

Function at 0x4aef00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aefea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf3ebff6865dff7e1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf5e4f3ebff6865df
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xfaea1a72652002fc
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa11040b0f000008
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6090b020a11040b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100507000f011004
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4aef8d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4aefba
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4aefdd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4aef70
jmp 0x4aefd1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004aef00
Function at 0x4af2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af3bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1526bbd98c784174
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x327375d5202a1526
mov qword [rsp + 0x24], rdx
movabs rdx, 0x707040a00050001
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30001000707040a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0a0806000d0a05
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4af360
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4af38d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4af3b0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4af342
jmp 0x4af3a4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004af2e0

Function at 0x4af3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af4ec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe96ff57a7486f59c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1872e1f0a96f6420
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20f313711872e1f0
mov qword [rsp + 0x28], rdx
movabs rdx, 0x64656869a59be42f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4161104170b0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa140c1010021104
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1120f0a0214170d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0715180b180505
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4af488
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x20
jge 0x4af4bc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4af4df
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x56]
cmp rsi, 0x1c
jb 0x4af46e
jmp 0x4af4d3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004af3e0
Function at 0x4af500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af5e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e736126731d757a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x638365758f986e73
mov qword [rsp + 0x24], rdx
movabs rdx, 0x708090c0908
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x601030400000708
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60d0002080c0a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4af580
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4af5b2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4af5d7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0xe
jb 0x4af562
jmp 0x4af5cb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004af500

Function at 0x4b09e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0aa7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x89337590dec1656e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x854f9d2e
movabs rdx, 0x305030409090b02
mov qword [rsp + 0x28], rdx
movabs rdx, 0x904040b0b04070a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b0a48
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4b0a77
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4b0a9a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4b0a2b
jmp 0x4b0a8e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b09e0

Function at 0x4b0ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0b7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf64b60fd264094b
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6c
movabs rdx, 0x704050305010001
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
nop
jmp 0x4b0b20
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4b0b4d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b0b70
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4b0b02
jmp 0x4b0b64
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b0ac0
Function at 0x4b1ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1b8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc2fb9e734e7407ef
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x10695368
movabs rdx, 0x1070005030b0407
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3050107060b060b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b1b25
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b1b5c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4b1b7f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 0xc
jb 0x4b1b0b
jmp 0x4b1b73
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b1ac0

Function at 0x4b1ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1c8a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e296b6f54744939
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa902496e296b6f54
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e481e4d616dcbe5
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc060b060a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9110b110000000c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x611010f100f0611
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b1c2d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4b1c5a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b1c7d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b1c10
jmp 0x4b1c71
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b1ba0
Function at 0x4b2680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b274c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8d099204458cfe52
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf58eed79e08d0992
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10802050708060b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2060c0a0504080c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b26ef
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4b271c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b273f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4b26d2
jmp 0x4b2733
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b2680

Function at 0x4b3580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b367b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe05e47cb746801b4
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4780663f7429653c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf069615bb465c241
mov qword [rsp + 0x28], rdx
movabs rdx, 0x201110c0411020e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60e0f10140e1705
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100a0013040a0808
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8040c110f17070e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b3619
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x4b364b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4b366e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x18
jb 0x4b35ff
jmp 0x4b3662
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004b3580
Function at 0x4b4320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b43dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc23efb265173e944
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x3e4b
movabs rdx, 0x604070601010504
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8040109
xor eax, eax
jmp 0x4b4380
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4b43ad
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b43d0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b4363
jmp 0x4b43c4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b4320

Function at 0x4b5380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5446
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8950657261617272
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x89ec
movabs rdx, 0x802000709040702
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4040709
xor eax, eax
jmp 0x4b53e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4b5412
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b5437
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0xa
jb 0x4b53c3
jmp 0x4b542b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b5380
Function at 0x4b81e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b82ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4374f678e34957d2
mov qword [rsp + 0x18], rdx
movabs rdx, 0x64584374f678e349
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x73f63e63cf725065
mov qword [rsp + 0x22], rdx
movabs rdx, 0x210020002080200
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30001010f030210
mov qword [rsp + 0x30], rdx
movabs rdx, 0x101030d08051010
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b826d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x4b829a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b82bd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b8250
jmp 0x4b82b1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b81e0

Function at 0x4b82e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b83ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7365656984504a87
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8366736565698450
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x648665a875797172
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10030e05080b0500
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50c010007071003
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11030702090e0c07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b836d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x4b839a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b83bd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b8350
jmp 0x4b83b1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b82e0
Function at 0x4b83e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b84fd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6dc16c6982b2656d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xea76a26d97a69192
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e6fea76a26d97a6
mov qword [rsp + 0x24], rdx
movabs rdx, 0x976587718473968f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0b13070a170709
mov qword [rsp + 0x34], rdx
movabs rdx, 0x141608170e0b1307
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd15070d06020706
mov qword [rsp + 0x40], rdx
movabs rdx, 0x619140015170f03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7171218190e1903
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b84a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4b84cd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4b84f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4b847d
jmp 0x4b84e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b83e0

Function at 0x4b94e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b95e8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65ed65bac7ddcce4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x74e26cd56dedf3cf
mov qword [rsp + 0x21], rdx
movabs rdx, 0xdd74e26cd56dedf3
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc75971dac753e352
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1202160a03170e18
mov qword [rsp + 0x32], rdx
movabs rdx, 0x11061514010c1017
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x100e030c06001106
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40a080310090400
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b958b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4b95b8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4b95db
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4b956e
jmp 0x4b95cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b94e0
Function at 0x4ba380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba43d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9872b726c8637dc2
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xa8
movabs rdx, 0x804000801000705
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x803
xor eax, eax
nop
jmp 0x4ba3e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4ba40d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4ba430
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4ba3c2
jmp 0x4ba424
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ba380

Function at 0x4ba460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba53d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x11c365a2257012e5
mov qword [rsp + 0x19], rdx
movabs rdx, 0xaed569466611c365
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc000b07030b0c06
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40c0c000b07030b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70701030b070b01
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4ba4e0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4ba50d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ba530
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4ba4c2
jmp 0x4ba524
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ba460