joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a9800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a98ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4f6b6c482a366f4e
mov qword [rsp + 0x33], rdx
movabs rdx, 0xfe670239314f6b6c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe3a2435436647261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100a130b0414090b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x302030c0208100a
mov qword [rsp + 0x23], rdx
movabs rdx, 0x120207040c100b0c
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4a988a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xb]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a98bc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a98df
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xb]
cmp rsi, 0x15
jb 0x4a9870
jmp 0x4a98d3
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a9800

Function at 0x4a9a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9b2c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xfa6d066fdb3c28ef
mov qword [rsp + 0x39], rdx
movabs rdx, 0x7ae5256dcf743c64
mov qword [rsp + 0x41], rdx
movabs rdx, 0x126e0e20656e277a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf8056974a21d7249
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d05171e05141e0e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x14160702141a0b05
mov qword [rsp + 0x21], rdx
movabs rdx, 0x517031016140900
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1001190d17170214
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4a9ac8
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a9afc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x4a9b1f
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0x1f
jb 0x4a9aae
jmp 0x4a9b13
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x1f
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1f
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a9a20
Function at 0x4b23c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2498
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xee71fc78f3fcf47a
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x75faea2e
movabs rdx, 0x105010b0202060a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x40105010b0202
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90a030904030007
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4b2434
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x4b2468
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4b248b
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
nop
cmp rsi, 0xc
jb 0x4b241a
jmp 0x4b247f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.004b23c0

Function at 0x4b24c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2586
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6c49e169abe34999
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x3e
movabs rdx, 0x203080606080603
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x50501
xor eax, eax
nop
jmp 0x4b2520
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4b2552
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b2577
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 9
jb 0x4b2502
jmp 0x4b256b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b24c0
Function at 0x4b25a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b268c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f7edff3ee75eb73
mov qword [rsp + 0x33], rdx
movabs rdx, 0x72876e65796f7edf
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf18bdb756cefc905
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60113001408120b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe00031211020d0d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x11051404020f0113
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4b262a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b265c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b267f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0x15
jb 0x4b2610
jmp 0x4b2673
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b25a0

Function at 0x4b26a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2786
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74afc369a650ecb4
mov qword [rsp + 0x30], rdx
movabs rdx, 0xbb45d1adba6f62af
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5060805020908
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf01000506080502
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb000f060c030d0b
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4b2720
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5c]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b2752
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b2777
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5c]
cmp rsi, 0x10
jb 0x4b2702
jmp 0x4b276b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462ca0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b26a0
Function at 0x4b27a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2886
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2811732725fd6d27
mov qword [rsp + 0x31], rdx
movabs rdx, 0x19d3140f85c56128
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0a000907040d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4030b0b000a0a00
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc02070e00020a06
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4b2820
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3c]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4b2852
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b2877
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3c]
cmp rsi, 0xf
jb 0x4b2802
jmp 0x4b286b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b27a0

Function at 0x4b28a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b298c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xeeb37033a26fa8ce
mov qword [rsp + 0x33], rdx
movabs rdx, 0x65a38276aeeeb370
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8296756cb17665f5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x710010800140d08
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x130606040b130314
mov qword [rsp + 0x23], rdx
movabs rdx, 0x130a10070f141013
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4b292a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b295c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b297f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0x15
jb 0x4b2910
jmp 0x4b2973
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b28a0
Function at 0x4b2a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2b7d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x722653a94914a351
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9296722653a94914
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4af674611f3135a5
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc01040b09080409
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10100d0a0c020c0a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20910100d0a0c02
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3100b1002061108
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4b2b20
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4b2b4d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b2b70
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b2aff
jmp 0x4b2b64
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004b2a80

Function at 0x4b2ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2c78
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5f5e4b5f6576746e
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x736c6553
movabs rdx, 0xb0401060b050606
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7000b0401060b05
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x300050601030405
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4b2c14
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x4b2c48
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4b2c6b
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
nop
cmp rsi, 0xc
jb 0x4b2bfa
jmp 0x4b2c5f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.004b2ba0
Function at 0x4b2ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2d8a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe4c9ad6f17ae65cd
mov qword [rsp + 0x35], rdx
movabs rdx, 0x661549e4c9ad6f17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x246fc874b1d8bcfa
mov qword [rsp + 0x40], rdx
movabs rdx, 0x309020b10070e02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x100d060c120d1210
mov qword [rsp + 0x25], rdx
movabs rdx, 0x20b0903050b0b
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4b2d2d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jge 0x4b2d5a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b2d7d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b2d10
jmp 0x4b2d71
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b2ca0

Function at 0x4b2da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2e66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf3732f65630b72e1
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xdbdeccf3
movabs rdx, 0x50a0707000508
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x7020907
xor eax, eax
jmp 0x4b2e00
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x36]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4b2e32
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b2e57
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x36]
cmp rsi, 0xb
jb 0x4b2de4
jmp 0x4b2e4b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b2da0
Function at 0x4b2f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b304c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9381cc6fab8b8f89
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6643848b
movabs rdx, 0x105000202080b03
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20b090907060106
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4b2fe5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b301c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4b303f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0xc
jb 0x4b2fcb
jmp 0x4b3033
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b2f80

Function at 0x4b32e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b33bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8b33c982ad7c834d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x74828972858c8b33
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90d090c01090103
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0b0405090d090c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x709040705080202
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4b3360
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4b338d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b33b0
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4b3342
jmp 0x4b33a4
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004b32e0
Function at 0x4b33e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b34bd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x32b93006bf44194d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x95d778cf1a32b930
mov qword [rsp + 0x30], rdx
movabs rdx, 0x808010201040202
mov qword [rsp + 0x19], rdx
movabs rdx, 0x108080801020104
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb030c0604090305
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x4b3460
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4b348d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b34b0
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4b3442
jmp 0x4b34a4
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00462ca0
mov eax, edi
mov ecx, 0xd
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004b33e0

Function at 0x4b34e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b35ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65605a78f3e24ec8
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x57e5ff65
movabs rdx, 0x400080901090405
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x203060101060505
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4b3545
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b357c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4b359f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0xb
jb 0x4b352b
jmp 0x4b3593
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b34e0
Function at 0x4b3800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b38c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc1aaa063dfc8a855
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x78a265a4
movabs rdx, 0x803020103030701
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6080501070a0803
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4b3868
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x4b3897
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4b38ba
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4b384b
jmp 0x4b38ae
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b3800

Function at 0x4b38e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b39ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7b6c7c7574729b88
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xb89a6561
movabs rdx, 0x7000a07000b0a01
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x800010b00070a05
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4b3945
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b397c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4b399f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x21]
cmp rsi, 0xc
jb 0x4b392b
jmp 0x4b3993
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b38e0

Function at 0x4b39c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3a86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5d58615c6f748d7e
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x6c658c5d
movabs rdx, 0x801010401010008
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x7030600
xor eax, eax
jmp 0x4b3a20
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4b3a52
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b3a77
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 0xb
jb 0x4b3a04
jmp 0x4b3a6b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b39c0
Function at 0x4b3bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3cbb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbb2aed1774e9eec1
mov qword [rsp + 0x39], rdx
movabs rdx, 0x6db76f72e5a507bb
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6b63d1091c74f865
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1007010605070209
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6140512020d020a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x200001406140512
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1308140209060a04
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4b3c59
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4b3c8b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b3cae
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x17
jb 0x4b3c3f
jmp 0x4b3ca2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004b3bc0

Function at 0x4b3ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3dcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e666ff2d0746547
mov qword [rsp + 0x33], rdx
movabs rdx, 0xc7eccf6f6c6e666f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe8e9e4030c7cea72
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70a041210101209
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x41314031407070a
mov qword [rsp + 0x23], rdx
movabs rdx, 0xe0a0f0e0b0c1311
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4b3d6a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b3d9c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b3dbf
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0x15
jb 0x4b3d50
jmp 0x4b3db3
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b3ce0