joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4aef00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af013
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x8be96794a7737520
mov qword [rsp + 0x18], rdx
movabs rdx, 0x738f6572569ac66e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7aba738f6572569a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc9a6b161cc94bf6c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30e0b061717130e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1009180418150b19
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x70b041910141009
mov qword [rsp + 0x40], rdx
movabs rdx, 0x141111030914110a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aefae
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffb9
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4aefdf
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4af006
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffb9
add r8d, edx
cmp rsi, 0x1a
jb 0x4aef94
jmp 0x4aeffa
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f380
mov eax, edi
mov ecx, 0x1a
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004aef00

Function at 0x4af200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af2e8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xfeabec622d0f6fad
mov qword [rsp + 0x18], rdx
movabs rdx, 0x276eacef746422a9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5080705060f0409
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7040600040c0a09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2000d0c000a020a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4af281
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffb1
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x18
jge 0x4af2b2
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4af2db
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffb1
add r8d, edx
cmp rsi, 0x10
jb 0x4af267
jmp 0x4af2cf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004af200
Function at 0x4b1fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b20e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc6fbf20b66c0e66
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8384730c6fbf20b6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6d3311425320746f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1203071110120a12
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x712120f0907090a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7030712120f0907
mov qword [rsp + 0x38], rdx
movabs rdx, 0x112010a09050a0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b2082
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x4b20af
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b20db
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b2065
jmp 0x4b20cf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f380
mov eax, edi
mov ecx, 0x13
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004b1fe0

Function at 0x4b5300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b53f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xf7a8642072159cad
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xff64650e02f7a864
mov qword [rsp + 0x22], rdx
movabs rdx, 0x323d89126e722a7b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0d020101001112
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6130d09130f0e0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80007090e110c0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b5390
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x57
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b53c2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b53e9
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x57
add r8d, edx
cmp rsi, 0x15
jb 0x4b5376
nop
jmp 0x4b53dd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004b5300
Function at 0x4b5520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b55fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x20e9201672d96c4d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x11d21520e9201672
mov qword [rsp + 0x22], rdx
movabs rdx, 0x409070206020700
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa06040808020409
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b5592
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x3a
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b55c8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b55ef
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x3a
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4b5578
jmp 0x4b55e3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.004b5520
Function at 0x4b9100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9213
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe699f8b9cf06f63
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8317dda56fa0749e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x72d24a8317dda56f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x97428f73bb766f20
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe110c0e0708190c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80d0e04021a0511
mov qword [rsp + 0x40], rdx
movabs rdx, 0x161a0e0d080c0a03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1815101615081a0f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b91ae
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffb4
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x20
jge 0x4b91df
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4b9206
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffb4
add r8d, edx
cmp rsi, 0x1b
jb 0x4b9194
jmp 0x4b91fa
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0045f380
mov eax, edi
mov ecx, 0x1b
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004b9100
Function at 0x4ba300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba3f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7b657fce207d4693
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x17697b657fce207d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1e21722b1e6911c6
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe07090c000e0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe02020c090d050c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10110b0d0504040c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ba390
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x3a
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ba3c2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ba3e9
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x3a
add r8d, edx
cmp rsi, 0x12
jb 0x4ba376
nop
jmp 0x4ba3dd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f380
mov eax, edi
mov ecx, 0x12
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004ba300

Function at 0x4ba420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba4f2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x72645f70577c1661
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6f726772645f7057
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80400050a040103
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x902090a
xor eax, eax
jmp 0x4ba48e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4ba4bb
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ba4e5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ba471
jmp 0x4ba4d6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004ba420
Function at 0x4bbd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbe0b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5157086c61763869
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x746e433c4e4f393f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0b06010c090901
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5070d0b06010c09
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd09080a08080b06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bbda4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4bbdd7
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4bbdfe
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4bbd87
jmp 0x4bbdf2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004bbd20

Function at 0x4bc1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc2e8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x2054ca2e017936ad
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x64ee74634006309c
mov qword [rsp + 0x27], rdx
movabs rdx, 0xfd622764ee746340
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x36c51a4d4d9c2de6
mov qword [rsp + 0x32], rdx
movabs rdx, 0x15171a0118000806
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x600170b09001517
mov qword [rsp + 0x40], rdx
movabs rdx, 0x51213120a03140e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa16180712161912
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10050414190b03
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4bc280
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x10
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x4bc2b1
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4bc2db
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x10
add r8d, edx
cmp rsi, 0x1b
jb 0x4bc263
jmp 0x4bc2cf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1b
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0045f380
mov eax, edi
mov ecx, 0x1b
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004bc1c0
Function at 0x4bc300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc3f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x20d561685879e3bc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6ea1b5ce20d56168
mov qword [rsp + 0x22], rdx
movabs rdx, 0x28a6bcdc5bcd6e6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x910090013080a0c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1203030800100910
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe120f100106080d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bc390
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x79
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4bc3c2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bc3e9
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x79
add r8d, edx
cmp rsi, 0x14
jb 0x4bc376
nop
jmp 0x4bc3dd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004bc300

Function at 0x4bc9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bca9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x143b20525869553e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x49154b6c555c143b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30d080404000706
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3010b02070c090b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bca35
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4bca68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4bca8f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4bca18
jmp 0x4bca83
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f380
mov eax, edi
mov ecx, 0xe
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.004bc9c0
Function at 0x4bd2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd3e6
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x1f205c1949c86129
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc02019139b1f205c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x200624c427c6c10a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xef797224fcb469c6
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe5c3be9665fc0b0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x218031d23110513
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c1d0c1f22071702
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1e1821170d0e13
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f15180d1f082423
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e09070e1f0a13
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1911231502121004
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4bd380
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x30
jge 0x4bd3ad
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4bd3d4
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x25
jb 0x4bd362
jmp 0x4bd3c8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.0044a0a0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x25
call fcn.0045f380
mov eax, edi
mov ecx, 0x25
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004bd2a0

Function at 0x4be120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be232
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xd075b08eb76e6afe
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd12ac7ca3372c46f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xace7cfced5b7666f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10b140e00161216
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1716010b140e0016
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb08050903000112
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc01081415070d03
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc130f0d12040913
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4be1d1
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4be1fe
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4be225
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4be1b4
jmp 0x4be219
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f380
mov eax, edi
mov ecx, 0x18
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004be120
Function at 0x4be7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be8ab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x1f65112ad22e131e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x84e36f30a46fca74
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0f030b01050900
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc030f0f030b0105
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4020c040e070f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4be844
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4be877
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4be89e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4be827
jmp 0x4be892
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004be7c0

Function at 0x4bebe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4becd6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4c614a20652b6966
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x542d4c614a20652b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xee6e035b3ecf4a4e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x110a070b0c0c0f0d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x205110e110a070b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0c090a0805080d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bec73
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4beca2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4becc9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4bec56
nop
jmp 0x4becbd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f380
mov eax, edi
mov ecx, 0x12
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004bebe0
Function at 0x4bf7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf888
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x657a956e7d7e2f7a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x605010302010305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x100
xor eax, eax
nop
jmp 0x4bf820
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffec
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4bf851
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bf87b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffec
add r8d, edx
cmp rsi, 8
jb 0x4bf802
jmp 0x4bf86f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f380
mov eax, edi
mov ecx, 8
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004bf7c0
Function at 0x4c1860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1968
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa56e7d347434f091
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x63011d2074a56e7d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc1e817cf72f51133
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x207040513090d0f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x11040a0200090109
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x914090511040a02
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0412140b110a0d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c1900
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x30
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4c1931
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c195b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x30
add r8d, edx
cmp rsi, 0x15
jb 0x4c18e5
jmp 0x4c194f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004c1860

Function at 0x4c1ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1fe8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xcc0874bc211fba03
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1cebce796d1b05cc
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa76574b46124c1c0
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9070c030b0c1202
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20f11130a020310
mov qword [rsp + 0x38], rdx
movabs rdx, 0x302080b03010408
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160d1100060a0e0f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c1f80
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x40
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x4c1fb1
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c1fdb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x40
add r8d, edx
cmp rsi, 0x17
jb 0x4c1f65
jmp 0x4c1fcf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004c1ee0