joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4abc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abce6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf233b8ddfb6e316b
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6c6fdeee
movabs rdx, 0x40907050302010a
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x3010a08
xor eax, eax
jmp 0x4abc80
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4abcb2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4abcd7
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0xc
jb 0x4abc64
jmp 0x4abccb
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004abc20

Function at 0x4abd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abde6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x453d4dd544273d2f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x57790c3bf6453d4d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4090a000a080002
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20204090a000a08
mov qword [rsp + 0x28], rdx
movabs rdx, 0x800050709080601
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4abd80
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4abdb2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4abdd7
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0xd
jb 0x4abd62
jmp 0x4abdcb
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00463f80
mov eax, edi
mov ecx, 0xd
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004abd00

Function at 0x4af280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af332
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xeefbe7e774eeec44
mov qword [rsp + 0x20], rdx
movabs rdx, 0x405030507060102
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4af2ce
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4af302
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4af325
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 8
jb 0x4af2b4
nop
jmp 0x4af319
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044e180
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00463f80
mov eax, edi
mov ecx, 8
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004af280
Function at 0x4b8660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b874a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x796138673b720923
mov qword [rsp + 0x32], rdx
movabs rdx, 0xdd2f61c2ef1e7961
mov qword [rsp + 0x38], rdx
movabs rdx, 0x656dd9120a184861
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1208090d13110a12
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0510050c121208
mov qword [rsp + 0x22], rdx
movabs rdx, 0x30d09000d01130f
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4b86ed
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x4b871a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b873d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4b86d0
jmp 0x4b8731
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00463f80
mov eax, edi
mov ecx, 0x16
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004b8660

Function at 0x4b9220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b930a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4e75757a62515264
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64567f735f05614e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5e69697220586866
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20a130c09091101
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7000b0a06100a0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130c150a030f1611
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b92ad
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x4b92da
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b92fd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4b9290
jmp 0x4b92f1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004b9220
Function at 0x4b98c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b99aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe0c4c0d2ed658fbb
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc16e6174d95bafe0
mov qword [rsp + 0x20], rdx
movabs rdx, 0xeac6e5dfe164f135
mov qword [rsp + 0x28], rdx
movabs rdx, 0x12010f000e061010
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140709100008050a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1513160410030f04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b994d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x4b997a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b999d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4b9930
jmp 0x4b9991
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004b98c0

Function at 0x4b9d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9e1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x63e5745e6162a7da
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc66e43f36d2063e5
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6a00505576649b7e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x130e1515150b0f11
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe090d0e12090001
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x120209040e090d0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60b0912140f0a13
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b9dc0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4b9ded
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b9e10
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x4b9d9f
jmp 0x4b9e04
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00463f80
mov eax, edi
mov ecx, 0x16
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004b9d20
Function at 0x4ba380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba47d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2083b57c69a48cb5
mov qword [rsp + 0x19], rdx
movabs rdx, 0x647f0198532083b5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9baf94922064d226
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0d061100020b01
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2140e1305000d0a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x90902140e130500
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120a0a0d04001213
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ba420
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4ba44d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ba470
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4ba3ff
jmp 0x4ba464
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004ba380

Function at 0x4bacc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4badcc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x69324b3f3656476b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x303a582033fb4c30
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4f45303a582033fb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6513695460367230
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x106181509000b0d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80e0514020d0802
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x110401050b03080e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb080a05120f0210
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bad68
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4bad9c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4badbf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0x1a
jb 0x4bad4e
jmp 0x4badb3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00463f80
mov eax, edi
mov ecx, 0x1a
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004bacc0
Function at 0x4bade0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4baecc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x206ec8bbbc73d24e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x446ed2ba3d206ec8
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc92d1b54206472ec
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120c0d00050d0800
mov qword [rsp + 0x32], rdx
movabs rdx, 0x121304000a01120c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120c091408030d08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bae6a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4bae9c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4baebf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 0x15
jb 0x4bae50
jmp 0x4baeb3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004bade0
Function at 0x4bc160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc24c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf9b2236e6fa19eb4
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xfa6e02f9b2236e6f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf9a0a3e957a17261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7060205010d120a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe10080d11010706
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50005020701100f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bc1ea
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4bc21c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4bc23f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0x13
jb 0x4bc1d0
jmp 0x4bc233
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00463f80
mov eax, edi
mov ecx, 0x13
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004bc160

Function at 0x4bc720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc80a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x53de638e9553e69b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64e2b67453de638e
mov qword [rsp + 0x22], rdx
movabs rdx, 0xac646988b1cb198f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0e120f0304090d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6020c0d0a010c0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1013020a011309
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bc7ad
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4bc7da
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bc7fd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4bc790
jmp 0x4bc7f1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004bc720
Function at 0x4bef20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf00a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5d9474cdd1986185
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8f6ea575849e5d94
mov qword [rsp + 0x20], rdx
movabs rdx, 0x659ca7c6ab6472c2
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0003060912060b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140e0a091304040e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8021107020d0d06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4befad
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x4befda
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4beffd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4bef90
jmp 0x4beff1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00463f80
mov eax, edi
mov ecx, 0x16
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004bef20

Function at 0x4bf020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf11b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x626abd5477828a4e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x71839d748f6f983b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9a7e7681208d7174
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100f0109170a0504
mov qword [rsp + 0x32], rdx
movabs rdx, 0x110b17061215150d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x7141102040e110b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1009170b0a081603
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bf0b9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4bf0eb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4bf10e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x18
jb 0x4bf09f
jmp 0x4bf102
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00463f80
mov eax, edi
mov ecx, 0x18
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.004bf020
Function at 0x4c04e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c05cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe7d7cee529726f4b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x206e23e7d7cee529
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8998ea54236403e2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3120311050c0310
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0b050712030312
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120c0a0806040604
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c056a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c059c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c05bf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0x13
jb 0x4c0550
jmp 0x4c05b3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00463f80
mov eax, edi
mov ecx, 0x13
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c04e0

Function at 0x4c0960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0a4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x53f7e1ffffb66110
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe36e94f053f7e1ff
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656d753b5c0ba195
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5100800090d0e03
mov qword [rsp + 0x32], rdx
movabs rdx, 0x110f0909060c0510
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb110d04050f0206
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c09ea
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c0a1c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c0a3f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x14
jb 0x4c09d0
jmp 0x4c0a33
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c0960
Function at 0x4c2800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c290c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9f62d141bf6659b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x42e33069256107dc
mov qword [rsp + 0x24], rdx
movabs rdx, 0x196e367442e33069
mov qword [rsp + 0x28], rdx
movabs rdx, 0x996d69dd206472ef
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1b090f0600181818
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3111b0418131418
mov qword [rsp + 0x40], rdx
movabs rdx, 0x409050803040b0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x205070f0914030e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c28a8
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x26]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x20
jge 0x4c28dc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4c28ff
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x26]
cmp rsi, 0x1c
jb 0x4c288e
jmp 0x4c28f3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00463f80
mov eax, edi
mov ecx, 0x1c
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c2800

Function at 0x4c2fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c30c8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x746e65e1e9d58383
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1ef2e57186c49ed
mov qword [rsp + 0x24], rdx
movabs rdx, 0x646e173601ef2e57
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65e36924a673e3ea
mov qword [rsp + 0x30], rdx
movabs rdx, 0x150e010808000e04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x817171111160f14
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb11171a03020114
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2111a0809100f18
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c306b
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x20
jge 0x4c3098
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4c30bb
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4c304e
jmp 0x4c30af
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00463f80
mov eax, edi
mov ecx, 0x1c
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c2fc0
Function at 0x4c3b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3c88
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8f107e5203d7841
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e7774fd20fa80f8
mov qword [rsp + 0x25], rdx
movabs rdx, 0x936e7774fd20fa80
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7c6d694d69167261
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1504080608101802
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14140c0907180e01
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x50a14140c090718
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0e010213070414
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c3c2b
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x4c3c58
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4c3c7b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4c3c0e
jmp 0x4c3c6f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00463f80
mov eax, edi
mov ecx, 0x19
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c3b80

Function at 0x4c4f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c500a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2016fbb1616c6500
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xdefa6174a72016fb
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd284f31dfe646296
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0b0e0812141413
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1105050d0c001013
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe06081010041010
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c4fad
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4c4fda
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c4ffd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c4f90
jmp 0x4c4ff1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c4f20