joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4af780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af8b2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x9377af5976b09b63
mov qword [rsp + 0x42], rdx
movabs rdx, 0x997f654463a19377
mov qword [rsp + 0x48], rdx
movabs rdx, 0x659088886e20cade
mov qword [rsp + 0x50], rdx
movabs rdx, 0x518672506873e690
mov qword [rsp + 0x58], rdx
movabs rdx, 0x799b50728fb16c87
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf0c041d02020e1d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa1e0f0d0f170f0c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1d03080c010d2024
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x231a04011c061614
mov qword [rsp + 0x32], rdx
movabs rdx, 0x704212413120705
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x4af84c
movzx r9d, byte [rsp + rsi + 0x42]
add r9d, 0xffffffbc
add edx, r9d
mov byte [rsp + rdi + 0x42], dl
mov byte [rsp + rsi + 0x42], r8b
add rax, 2
cmp rax, 0x26
jge 0x4af87d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x4af8a5
movzx r8d, byte [rsp + rdi + 0x42]
add r8d, 0xffffffbc
add r8d, edx
cmp rsi, 0x26
jb 0x4af832
jmp 0x4af898
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x26
call fcn.00441e20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x26
nop
call fcn.00453d80
mov eax, edi
mov ecx, 0x26
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004af780

Function at 0x4afda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afee8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x695f746f9d3d505b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1c20636579695f74
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x204d776c42045120
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20705361726a8e6c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x535574155d727364
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60117240603021b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1e1221060e160811
mov qword [rsp + 0x46], rdx
movabs rdx, 0x130f1e1221060e16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10210320071a0e08
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2230e2002160e13
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7000f00201b0c20
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4afe80
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffd8
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2a
jge 0x4afeb1
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4afedb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffd8
add r8d, edx
cmp rsi, 0x25
jb 0x4afe62
jmp 0x4afecf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x25
call fcn.00453d80
mov eax, edi
mov ecx, 0x25
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004afda0
Function at 0x4b28a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b29d2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xa496726f25e2656e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4c7264a496726f25
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd56fe7d198cb7010
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5da36f3c0663656e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe4d1e9043482ac6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x201d060a1a1e220f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1d1621160e1f1a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x710221c19201d02
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1217210b10070d16
mov qword [rsp + 0x58], rdx
movabs rdx, 0x201722160e021903
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4b296c
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xf
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x28
jge 0x4b299d
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4b29c5
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xf
add r8d, edx
cmp rsi, 0x23
jb 0x4b2952
jmp 0x4b29b8
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
call fcn.00441e20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x23
nop
call fcn.00453d80
mov eax, edi
mov ecx, 0x23
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004b28a0
Function at 0x4b4400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4508
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x81206f687a831b89
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7961866f95998120
mov qword [rsp + 0x20], rdx
movabs rdx, 0xac67786d786d5c7e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x130b03150f01040d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb03150904151407
mov qword [rsp + 0x38], rdx
movabs rdx, 0x15110e051502110b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1414001311111508
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b44a2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x4b44cf
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b44fb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4b4485
jmp 0x4b44ef
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00453d80
mov eax, edi
mov ecx, 0x16
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004b4400

Function at 0x4b4980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4a76
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x20196d615c636c5f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x69606c6f6420196d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60656a5d62616d6e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1210051014031108
mov qword [rsp + 0x32], rdx
movabs rdx, 0x803010601051210
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0e0100010f0b01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b4a10
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffef
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b4a42
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b4a69
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffef
add r8d, edx
cmp rsi, 0x15
jb 0x4b49f6
nop
jmp 0x4b4a5d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453d80
mov eax, edi
mov ecx, 0x15
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.004b4980
Function at 0x4b4aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4ba8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6e54526fca6f6360
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf54535a6c396e54
mov qword [rsp + 0x24], rdx
movabs rdx, 0x504f624b64616176
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x806120b140d0308
mov qword [rsp + 0x34], rdx
movabs rdx, 0x120a0b031505060c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x8140011120a0b03
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa01091510010715
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b4b42
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1c
jge 0x4b4b6f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b4b9b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x4b4b25
jmp 0x4b4b8f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00453d80
mov eax, edi
mov ecx, 0x16
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004b4aa0

Function at 0x4b5360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5468
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x533b65e8094047f8
mov qword [rsp + 0x19], rdx
movabs rdx, 0x207431533b65e809
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc8e65fb743fc801
mov qword [rsp + 0x24], rdx
movabs rdx, 0x401080b0f030811
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0004000f021201
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40c0b0b000400
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12070103060b080d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b5402
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1c
jge 0x4b542f
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b545b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b53e5
jmp 0x4b544f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453d80
mov eax, edi
mov ecx, 0x13
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004b5360
Function at 0x4b7e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7f48
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6f697d7f866ba397
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x812082996e426e6f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70657492696d949a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1010090901000313
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe05160c000b0f0b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x10160e05160c000b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0c040213010403
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b7ee0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffda
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4b7f11
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b7f3b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffda
add r8d, edx
cmp rsi, 0x17
jb 0x4b7ec5
jmp 0x4b7f2f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453d80
mov eax, edi
mov ecx, 0x17
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004b7e40

Function at 0x4b8be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8d06
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x7df573795a6f7561
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4a206765d36a2b20
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6f524b7370764a20
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x37336b3f79562672
mov qword [rsp + 0x32], rdx
movabs rdx, 0x18060c1c0b09171a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1d1a0f0c13181806
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6171a141d0a0609
mov qword [rsp + 0x48], rdx
movabs rdx, 0x180718050b000510
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c01001200031904
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b8ca0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x26
jge 0x4b8ccd
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4b8cf4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4b8c83
jmp 0x4b8ce8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.00441e20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00453d80
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004b8be0
Function at 0x4b95c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b96a8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x66200a146fa8e372
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x72bc7372acb069bd
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80d0e040504010a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x805080d0e040504
mov qword [rsp + 0x30], rdx
movabs rdx, 0x708020b0205090a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b9641
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffaa
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x12
jge 0x4b9672
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b969b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffaa
add r8d, edx
cmp rsi, 0x10
jb 0x4b9627
jmp 0x4b968f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453d80
mov eax, edi
mov ecx, 0x10
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004b95c0

Function at 0x4b96c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4b9835
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xd8a57272dea35296
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8b90797376ab657e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x5ba6ba8b90797376
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6f92ec20f150619d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8ed3899720aab35b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x938dbc88c074849e
mov qword [rsp + 0x42], rdx
movabs rdx, 0x19020e23101c2213
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1215012115121902
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2828180a16011603
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb020b261b121d15
mov qword [rsp + 0x60], rdx
movabs rdx, 0x111f0829000a0320
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d00202727060607
mov qword [rsp + 0x70], rdx
movabs rdx, 0x31d1b0f1f01242a
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4b97c7
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffa4
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x36
jge 0x4b97fb
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2b
jae 0x4b9828
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffa4
add r8d, edx
cmp rsi, 0x2b
jb 0x4b97ad
jmp 0x4b981c
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2b
call fcn.00441e20
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2b
call fcn.00453d80
mov eax, edi
mov ecx, 0x2b
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004b96c0
Function at 0x4b9f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba052
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe5e5d952dd636f91
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2074ea6e4ceb70e5
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa82074ea6e4ceb70
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd3e3f7f0d3427075
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x615180314131508
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50a000b1703050b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x414050a000b1703
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100617140016070d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b9ff1
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x5a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x4ba01e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ba045
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4b9fd4
jmp 0x4ba039
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00441e20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00453d80
mov eax, edi
mov ecx, 0x19
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004b9f40

Function at 0x4ba060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba13c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5d563275336d7245
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb3d3947655d5632
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60003050a060b09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6090c0703050600
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ba0d5
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4ba108
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ba12f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xd
jb 0x4ba0b8
jmp 0x4ba123
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00453d80
mov eax, edi
mov ecx, 0xd
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004ba060
Function at 0x4baac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bab9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8ea566839e9a6574
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9373cb76dbc38ea5
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb06080b070a0908
mov qword [rsp + 0x28], rdx
movabs rdx, 0x907080d07040203
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bab35
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4bab68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4bab8f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4bab18
jmp 0x4bab83
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453d80
mov eax, edi
mov ecx, 0xe
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004baac0
Function at 0x4bb1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb2d2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x65927d747f73b072
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x61a2677fa17c7488
mov qword [rsp + 0x22], rdx
movabs rdx, 0x897f7520799f9a9e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x43979b849c7a8ba7
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10181e1211080117
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1b171d0c0e190b06
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6081919051a1b17
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0318171f1c041e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5180a16121c0416
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e0d161a12081016
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4bb26c
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffc6
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2e
jge 0x4bb29d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4bb2c5
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffc6
add r8d, edx
cmp rsi, 0x20
jb 0x4bb252
jmp 0x4bb2b8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.00441e20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
nop
call fcn.00453d80
mov eax, edi
mov ecx, 0x20
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004bb1a0

Function at 0x4bb2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb408
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x20b4c3c1dac56e24
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb96ac3020d6fb463
mov qword [rsp + 0x23], rdx
movabs rdx, 0x76b96ac3020d6fb4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6b6e18843bb53bc3
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0b0d15110b0914
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf16140c0e0b0d15
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0b0e000203040f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50c0e1309130e12
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6131114141405
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4bb3a0
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffff8d
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4bb3d1
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4bb3fb
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffff8d
add r8d, edx
cmp rsi, 0x19
jb 0x4bb383
jmp 0x4bb3ef
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00453d80
mov eax, edi
mov ecx, 0x19
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004bb2e0
Function at 0x4bb820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb8e8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe52e43d9dbd46e4f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6c44
movabs rdx, 0x3050007040308
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x502
xor eax, eax
jmp 0x4bb882
movzx r9d, byte [rsp + rsi + 0x26]
add r9d, 0xffffff86
add edx, r9d
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xa
jge 0x4bb8b3
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4bb8db
movzx r8d, byte [rsp + rdi + 0x26]
add r8d, 0xffffff86
add r8d, edx
cmp rsi, 0xa
jb 0x4bb868
jmp 0x4bb8cf
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00441e20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00453d80
mov eax, edi
mov ecx, 0xa
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004bb820

Function at 0x4bb900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb9d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4f7e6c65c172d0c4
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xcb6c0eb1
movabs rdx, 0x909010801070003
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60708090b090909
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bb96b
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffa7
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4bb99c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4bb9c5
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffa7
add r8d, edx
cmp rsi, 0xc
jb 0x4bb951
jmp 0x4bb9b7
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453d80
mov eax, edi
mov ecx, 0xc
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004bb900