joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ad760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad868
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x2d6b20d3d5282cd1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7254e122f3292d6b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x653a4625680bd8d0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf120a0405030c0f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x50200000e09050b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x800090105020000
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140e130c0712100c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ad802
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1c
jge 0x4ad82f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ad85b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x4ad7e5
jmp 0x4ad84f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00452c00
mov eax, edi
mov ecx, 0x16
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004ad760

Function at 0x4ad880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad996
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x79ffabf22094b2fe
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x69faee131c920920
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf720ff2e1f69faee
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6d658fb9ffa9936e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x191110170b0c1704
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1160e140a160502
mov qword [rsp + 0x40], rdx
movabs rdx, 0x918040a1911061a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60205110012100d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ad92e
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4ad962
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ad989
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0x1d
jb 0x4ad914
nop
jmp 0x4ad97d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441100
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00452c00
mov eax, edi
mov ecx, 0x1d
call fcn.00452c00
nop
call fcn.004505a0
nop dword [rax + rax]
jmp fcn.004ad880
Function at 0x4add00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ade12
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x656666daf3205860
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20ec6389e9fdcad5
mov qword [rsp + 0x25], rdx
movabs rdx, 0x320ec6389e9fdca
mov qword [rsp + 0x26], rdx
movabs rdx, 0x656ce37b0100f0d0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x11160c09150a1108
mov qword [rsp + 0x36], rdx
movabs rdx, 0x11208010b150400
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x140a011208010b15
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb10030804130e16
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4addb1
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x4addde
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ade05
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4add94
jmp 0x4addf9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00452c00
mov eax, edi
mov ecx, 0x19
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004add00
Function at 0x4aea20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aeb32
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6149006b59206f2d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6564350559523f5f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6f5f656435055952
mov qword [rsp + 0x22], rdx
movabs rdx, 0x655b03544b656672
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5090900060b0d15
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1016140017150c0a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1813101703081016
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd090c05040b1104
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aead1
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x4aeafe
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4aeb25
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4aeab4
jmp 0x4aeb19
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00452c00
mov eax, edi
mov ecx, 0x1a
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004aea20

Function at 0x4afce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afddc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xe30caa46652769f2
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfb3530e30caa4665
mov qword [rsp + 0x20], rdx
movabs rdx, 0x792127243034fbe5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6060a050804110e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc06000f09070a10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0f050602100d0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4afd70
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4afda8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4afdcf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x4afd56
jmp 0x4afdc3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441100
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00452c00
mov eax, edi
mov ecx, 0x13
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.004afce0
Function at 0x4b11a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b12a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xd96974db42d870d9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x94bcab48ef204bd9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x64c574d4483270ea
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa130a0c080f110e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x20f02120e110b03
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x415020f02120e11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30e150d0700130b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b1240
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4b1272
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b129b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0x17
jb 0x4b1225
jmp 0x4b128f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00452c00
mov eax, edi
mov ecx, 0x17
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004b11a0
Function at 0x4b3260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3368
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6a20706466211659
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x644e5c7274406a20
mov qword [rsp + 0x20], rdx
movabs rdx, 0x58680c5a51686052
mov qword [rsp + 0x28], rdx
movabs rdx, 0x305130e08110409
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7000d0c0f081415
mov qword [rsp + 0x38], rdx
movabs rdx, 0x201131214121101
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0b0c0c01111101
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b3300
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xd]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x4b3332
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b335b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xd]
cmp rsi, 0x16
jb 0x4b32e5
jmp 0x4b334f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00452c00
mov eax, edi
mov ecx, 0x16
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004b3260
Function at 0x4b42c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b43a8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x796c612bf4fff306
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x7383f0ef
movabs rdx, 0x8070408070a0200
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0808070408070a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10b010208030a09
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4b4340
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b4372
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4b439b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0xc
jb 0x4b4322
jmp 0x4b438f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
nop
call fcn.00441100
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00452c00
mov eax, edi
mov ecx, 0xc
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004b42c0

Function at 0x4b43c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b44ab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x19ce33d5dd2d6fca
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8a7390146f2cd419
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0c070e080400
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9030607000e0c07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x406050902080b0b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b4444
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x14
jge 0x4b4477
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4b449e
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4b4427
jmp 0x4b4492
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00452c00
mov eax, edi
mov ecx, 0xf
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004b43c0
Function at 0x4b5ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5bd6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x183e2b04746f7240
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3f72e2472b72287a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xdd1a6f413f72e247
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x64f9aa63d0747489
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb0010140b170c09
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd1a100c0c040019
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6001313080d1a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0c0512071a0d06
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b5b6e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4b5ba2
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4b5bc9
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0x1c
jb 0x4b5b54
nop
jmp 0x4b5bbd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00441100
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00452c00
mov eax, edi
mov ecx, 0x1c
call fcn.00452c00
nop
call fcn.004505a0
nop dword [rax + rax]
jmp fcn.004b5ac0

Function at 0x4b81e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b82e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x90ea7165a79c8343
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x808cb0c4646990ea
mov qword [rsp + 0x20], rdx
movabs rdx, 0xab649ba1a36ebce4
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0f030e0601130a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3030a0f010a0d12
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5070c0f03010b0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130111020f0c0e15
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b8282
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x4b82af
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b82db
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4b8265
jmp 0x4b82cf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00452c00
mov eax, edi
mov ecx, 0x16
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004b81e0
Function at 0x4b8b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8bf2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x748425650b74ab47
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xbf1e0cd0
movabs rdx, 0x80605030a080a06
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50b030105090806
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b8b8b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b8bbd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4b8be5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0xc
jb 0x4b8b71
jmp 0x4b8bd8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441100
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00452c00
mov eax, edi
mov ecx, 0xc
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004b8b20

Function at 0x4b8f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9008
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x63921a65c06fd62b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1be863921a65c06f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x25b724d5d2746817
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa01040308061006
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110e10040b040905
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110d110e10040b04
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf000f03040a1110
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b8fa2
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x4b8fcf
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b8ffb
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b8f85
jmp 0x4b8fef
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00452c00
mov eax, edi
mov ecx, 0x12
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004b8f00
Function at 0x4b92c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b93ab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x1b605d684e425570
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x38656b6f46367365
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2030f0a0b020703
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60502030f0a0b02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0007010f040102
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b9344
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4b9377
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4b939e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b9327
jmp 0x4b9392
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00452c00
mov eax, edi
mov ecx, 0x10
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004b92c0

Function at 0x4b98e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b99c8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xbe720efb51fc65a9
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbbcb9bbcde2b1ae8
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0b020c0005080d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a0f08070d0a0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40f05080f0e020d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b9961
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b9993
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b99bb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 0x10
jb 0x4b9947
jmp 0x4b99af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00452c00
mov eax, edi
mov ecx, 0x10
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004b98e0
Function at 0x4b99e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9abc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7972651642bdc1ca
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5746e4cdc66c2d1a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3020e0d0c09080b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2000204010c0b0d
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4b9a52
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b9a88
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b9aaf
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
nop dword [rax]
cmp rsi, 0x10
jb 0x4b9a38
jmp 0x4b9aa3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00441100
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.00452c00
mov eax, edi
mov ecx, 0x10
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.004b99e0

Function at 0x4ba160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba292
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x2bd3ae43bc37c7c5
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc652c301a4b902b6
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc79863bdc652c301
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb778bbf86e6f431e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7101b0814120e18
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100710060602050c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe19100710060602
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0802180b10090b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x618050d0a061202
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf010002030b1306
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ba22f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2a
jge 0x4ba25c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4ba285
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4ba212
jmp 0x4ba277
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00441100
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
nop
call fcn.00452c00
mov eax, edi
mov ecx, 0x1c
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004ba160
Function at 0x4bade0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4baee8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6ef19030ae30dfe1
mov qword [rsp + 0x18], rdx
movabs rdx, 0x72b9d0eb6ef19030
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xcae1cc4060c36d65
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4020e0309050510
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x11080f0012030f10
mov qword [rsp + 0x34], rdx
movabs rdx, 0x13040a0e11080f00
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10060201120a0b12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bae82
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x4baeaf
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4baedb
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x4bae65
jmp 0x4baecf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00452c00
mov eax, edi
mov ecx, 0x14
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004bade0

Function at 0x4bd540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd626
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6c69976393758846
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7a8465666675897b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe04030e03010803
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5090e04030e0301
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5050f0804050e09
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bd5c0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
mov byte [rsp + rdi + 0x1e], r9b
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x12
jge 0x4bd5ed
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bd614
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4bd5a7
jmp 0x4bd608
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00452c00
mov eax, edi
mov ecx, 0x10
nop dword [rax + rax]
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004bd540