joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a5c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4a5dd2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0xb3d91a0d93bc0d7c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb4941a77da363bee
mov qword [rsp + 0x27], rdx
movabs rdx, 0x99206eaac4206eb4
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5e116ed9bad4ca53
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6cfc6483720568dd
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x365b5dafbfe9311
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1b0d1713162c0f11
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x2704112e2e030b13
mov qword [rsp + 0x56], rdx
movabs rdx, 0x181f2704112e2e03
mov qword [rsp + 0x58], rdx
movabs rdx, 0x900121913180a0b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x250719021d05161a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x100212a2c0c2a0e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x6282b171e28090a
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2908012c161f2329
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4a5d6d
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x3a
jge 0x4a5d9f
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x4a5dc5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x2f
jb 0x4a5d53
jmp 0x4a5db9
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2f
call fcn.00441380
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00451880
mov eax, edi
mov ecx, 0x2f
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a5c60
Function at 0x4a7d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7e18
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9786c99661207689
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x601040707000005
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1070400
xor eax, eax
jmp 0x4a7db6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4a7de8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4a7e0b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 8
jb 0x4a7d9c
jmp 0x4a7dff
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004a7d60

Function at 0x4a9360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a946c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2782cef69ee65e9
mov qword [rsp + 0x18], rdx
movabs rdx, 0x65645f666f206580
mov qword [rsp + 0x20], rdx
movabs rdx, 0xfd7365645f666f20
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe270dbedb3647528
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8120d1316070611
mov qword [rsp + 0x32], rdx
movabs rdx, 0x151505010d031112
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x120d070002081515
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13000d0104170519
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a9408
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a943c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4a945f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0x1a
jb 0x4a93ee
jmp 0x4a9453
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a9360
Function at 0x4a9b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9c4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xec203acc2093e1c1
mov qword [rsp + 0x30], rdx
movabs rdx, 0xde3773ce61657246
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3565d172e0e75fdc
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5150e11040c0e08
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf08101712011000
mov qword [rsp + 0x20], rdx
movabs rdx, 0x131317070e021510
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4a9bed
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x4a9c1a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a9c3d
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x4a9bd0
jmp 0x4a9c31
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a9b60

Function at 0x4aa6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa7aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f6e201e74612116
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc9da2179746f6e20
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65c2ddc8be65dccd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40e130a0b12130e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90c12001110040e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10b1110100c0d01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4aa74d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x4aa77a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4aa79d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4aa730
jmp 0x4aa791
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004aa6c0
Function at 0x4aac60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aad68
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xcc4631fe0ea4fcb
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x515298569766515
mov qword [rsp + 0x23], rdx
movabs rdx, 0xbb05152985697665
mov qword [rsp + 0x24], rdx
movabs rdx, 0xca731472df641844
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x706180d0f0c1801
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40114020f100100
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x16120d0e04011402
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110f10140e030808
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aad0b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4aad38
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4aad5b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4aacee
jmp 0x4aad4f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004aac60

Function at 0x4ab7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab867
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe4296e256b5e7262
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65a2a9e4296e256b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x407060209080607
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4070707
xor eax, eax
jmp 0x4ab808
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4ab837
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4ab85a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ab7eb
jmp 0x4ab84e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ab7a0
Function at 0x4abb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abbfb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf2236305a00121bb
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9f795f66e20f223
mov qword [rsp + 0x22], rdx
movabs rdx, 0x648b6cfb6f707e75
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120b140103060f00
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3040f1312120f03
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10206040d0d0304
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf070c140a0c0a00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4abb99
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4abbcb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4abbee
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
cmp rsi, 0x16
jb 0x4abb7f
jmp 0x4abbe2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004abb00
Function at 0x4ada00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adae6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2168d77573c6d228
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x21c3761a25727e21
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20b0c05050008
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70100020b0c0505
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5020d0b020e0a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ada80
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4adab2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4adad7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0xf
jb 0x4ada62
jmp 0x4adacb
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ada00

Function at 0x4adbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adcdd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2c91da65556174ec
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe3876c6d532c91da
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x656c4e6e6e6802c5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90a0a0b09051210
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x61000000a0c070d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120b061000000a0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd050e1010030909
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4adc80
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4adcad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4adcd0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4adc5f
jmp 0x4adcc4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004adbe0
Function at 0x4add00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4addfb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2073c561adc0d0be
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x69332073c561adc0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1748777fe2003cb
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf080f01080e0f01
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0f110f0a011011
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0b0e0f110f0a01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100b0d030a000205
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4add99
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4addcb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4addee
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6c]
cmp rsi, 0x12
jb 0x4add7f
jmp 0x4adde2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004add00

Function at 0x4b0ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0bca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc75fafb5707972d4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8172770ec75fafb5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3acef7ba7c6e3da3
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf05130911060900
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11070c0b0811090d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100608120d040609
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b0b6d
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x4b0b9a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b0bbd
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4b0b50
jmp 0x4b0bb1
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b0ae0
Function at 0x4b1100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b11ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x33276b6f4dfd2b2a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x66483633276b6f4d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x112969745520600e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0b02110d0c0711
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1103010b060e09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30c08121111070b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b118a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xa]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b11bc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b11df
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xa]
cmp rsi, 0x13
jb 0x4b1170
jmp 0x4b11d3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b1100
Function at 0x4b3060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b317a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x250a3c15dcef6521
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x63f60a69c434bd13
mov qword [rsp + 0x22], rdx
movabs rdx, 0x169563f60a69c434
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2d42fbfa6e4b2d65
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x905130d00081002
mov qword [rsp + 0x34], rdx
movabs rdx, 0x14180b030905130d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8170308190e0216
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4040216190a0605
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11071006000b0502
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b3117
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x24
jge 0x4b3149
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4b316d
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0x1a
jb 0x4b30fd
jmp 0x4b3161
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004b3060

Function at 0x4b36c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b379d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x78566a95b0736d79
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8078915d898d6d9c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80e0106000a060a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30d050f070d030d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe04010b0c070e04
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b3740
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4b376d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b3790
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b3722
jmp 0x4b3784
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b36c0
Function at 0x4b40a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b416c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74b1c566c17465d8
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x9320
movabs rdx, 0x505030809030903
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6030905030505
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4b4104
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b413c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4b415f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 0xa
jb 0x4b40ea
jmp 0x4b4153
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b40a0

Function at 0x4b4180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b424c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6e46503373574031
mov qword [rsp + 0x19], rdx
movabs rdx, 0x234a436e46503373
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa00050401020806
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2020a09
xor eax, eax
jmp 0x4b41e5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4b421c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4b423f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0xb
jb 0x4b41cb
jmp 0x4b4233
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b4180

Function at 0x4b5c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5cf2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe33023376c182b07
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa1a64de22f065e3
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe0b04010e09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20606070d050a0e
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b5c8c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b5cbe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b5ce5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
cmp rsi, 0xf
jb 0x4b5c72
jmp 0x4b5cd5
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b5c20
Function at 0x4b5e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5f1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x736f8843b16ea589
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xb1
movabs rdx, 0x305080008080801
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x105
xor eax, eax
nop
jmp 0x4b5ec0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4b5eed
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b5f10
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4b5ea2
jmp 0x4b5f04
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b5e60

Function at 0x4b6760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6846
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x653e51615025585d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x444c6756733a653e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80b02020d010a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0300080b02020d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60d030108080b05
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4b67e0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b6812
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b6837
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0xe
jb 0x4b67c2
jmp 0x4b682b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b6760