joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4aaaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aabba
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x7058849b868f9569
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2ab9897b716167b0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7c66616c4c632ab9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x86a381927c64205e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x21c08110204020e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x111a1b0f0205021c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x111d1a1501151904
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc070f1b0c030d08
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf13040b06190916
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4aab57
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x26
jge 0x4aab89
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4aabad
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 0x1e
jb 0x4aab3d
jmp 0x4aaba1
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004aaaa0

Function at 0x4aabe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aacfa
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x74bcc1789ca5206e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2965c6fc0b6b75f5
mov qword [rsp + 0x24], rdx
movabs rdx, 0x53ab2965c6fc0b6b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb572ccc274658f20
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1616080a11190f11
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10191616080a1119
mov qword [rsp + 0x38], rdx
movabs rdx, 0x170a0b05020c0102
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170b0d060c0a0d05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40204020d031305
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4aac97
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x22
jge 0x4aacc9
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4aaced
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x1a
jb 0x4aac7d
jmp 0x4aace1
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004aabe0
Function at 0x4acc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4acd46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xfe14e545655062fc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x383f6f02e03c4b73
mov qword [rsp + 0x26], rdx
movabs rdx, 0x706020e05020009
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb070706020e0502
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0c070f070c0e04
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4acce0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4acd12
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4acd37
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x10
jb 0x4accc2
jmp 0x4acd2b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004acc60

Function at 0x4ad260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad35b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x95955989647d9a44
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6ccd66208d959559
mov qword [rsp + 0x24], rdx
movabs rdx, 0x71b18070886d73a3
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60b050106131007
mov qword [rsp + 0x34], rdx
movabs rdx, 0x120f140b13020d12
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x80f060f120f140b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110600040e010d12
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ad2f9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4ad32b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ad34e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x33]
cmp rsi, 0x15
jb 0x4ad2df
jmp 0x4ad342
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004ad260
Function at 0x4ad700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad7cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe36c2f9baaa2eb69
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x95b9a2e3
movabs rdx, 0x7050a0809050105
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3020103050b0a04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ad765
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ad79c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4ad7bf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0xc
jb 0x4ad74b
jmp 0x4ad7b3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ad700

Function at 0x4af4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af56c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65cc6861683dedfc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c6ce6afd265cc68
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9060609020209
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa010908050a0009
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4af50f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4af53c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4af55f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x4af4f2
jmp 0x4af553
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004af4a0

Function at 0x4b0840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b090c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2e25586547655f4f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3a0c642e25586547
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1050100000a090a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9030906
xor eax, eax
jmp 0x4b08a5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4b08dc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4b08ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0xb
jb 0x4b088b
jmp 0x4b08f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b0840
Function at 0x4b14e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b15ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c8752c57583cd95
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb0a0656c8752c575
mov qword [rsp + 0x22], rdx
movabs rdx, 0x96a6a38fb76f439c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf040106120e0309
mov qword [rsp + 0x32], rdx
movabs rdx, 0x12060f1103020f04
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb00100b12120a00
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b156d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4b159a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b15bd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b1550
jmp 0x4b15b1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b14e0

Function at 0x4b3800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b390c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe3653d0a4d4f3d43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x136966697429d658
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5061136966697429
mov qword [rsp + 0x24], rdx
movabs rdx, 0x297838d0e62a1619
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0511150a080713
mov qword [rsp + 0x34], rdx
movabs rdx, 0x203041316011409
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x501141202030413
mov qword [rsp + 0x40], rdx
movabs rdx, 0x705171914121411
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b38a8
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4b38dc
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4b38ff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0x1a
jb 0x4b388e
jmp 0x4b38f3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b3800
Function at 0x4b4cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4d78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9d497a906353b47e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x504010701070002
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x105
xor eax, eax
jmp 0x4b4d18
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4b4d48
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4b4d6b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4b4cfb
jmp 0x4b4d5f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004b4cc0

Function at 0x4b70c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b718c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8561637572705273
mov qword [rsp + 0x19], rdx
movabs rdx, 0x656e646e4a747185
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0804070a000109
mov qword [rsp + 0x28], rdx
movabs rdx, 0x909080a03010403
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b712f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4b715c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b717f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4b7112
jmp 0x4b7173
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b70c0

Function at 0x4b7540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7612
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x74b2394eae38cfd3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe65cfd40474b239
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1030c0502090803
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60c00050a090001
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b75ac
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b75de
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b7605
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
cmp rsi, 0xd
jb 0x4b7592
jmp 0x4b75f5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b7540
Function at 0x4b7ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7f86
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe50b14070274650d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x11a64d8e1936e50b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50a0a08050b0906
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30c050a0a08050b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7000308050a0d04
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4b7f20
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b7f52
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b7f77
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
cmp rsi, 0xe
jb 0x4b7f02
jmp 0x4b7f6b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b7ea0

Function at 0x4bb0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb19d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4656d26563a1d25
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x661651516ef10465
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e2b32026123236f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0c0a120b140f07
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc100a0200100f0f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11308010c100a02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4030c130c0801
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bb140
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4bb16d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4bb190
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x4bb11f
jmp 0x4bb184
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004bb0a0
Function at 0x4bbf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc052
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x83fd6a04d811f3f0
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xdc6c69e88b83fd6a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4060c0704020903
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0601000105080c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bbfec
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4bc01e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4bc045
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0xd
jb 0x4bbfd2
jmp 0x4bc035
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bbf80

Function at 0x4bdf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be046
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xdb69381a616d6eb9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc26c1b60b94f77db
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe00000b040a0a07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb050e00000b040a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7000c0c0c0e0e0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bdfe0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4be012
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4be037
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3c]
cmp rsi, 0xf
jb 0x4bdfc2
jmp 0x4be02b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bdf60
Function at 0x4be320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be3e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfdf4cff8f5eceb57
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x7b
movabs rdx, 0x401030702060208
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x505
xor eax, eax
nop
jmp 0x4be380
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4be3b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4be3d7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 9
jb 0x4be362
jmp 0x4be3cb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004be320

Function at 0x4be800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be8fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f17ff5f11744e4e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x366e3a6e696f17ff
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x29fb403f616d721a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x14110d030d051311
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60d120c0c050411
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10c060d120c0c05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50c1414010d0a0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4be8a0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4be8cd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4be8f0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4be87f
jmp 0x4be8e4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004be800
Function at 0x4bfb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bfc2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xde7685659fd6b1fe
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8093f4de7685659f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70005010a020a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x300050908090709
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bfbcf
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4bfbfc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4bfc1f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4bfbb2
jmp 0x4bfc13
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bfb60

Function at 0x4c05a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0672
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x582d552173154b29
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x656d36582d552173
mov qword [rsp + 0x22], rdx
movabs rdx, 0x101020507060704
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x508060707000101
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c060c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c063e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c0665
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0xb
jb 0x4c05f2
jmp 0x4c0655
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004c05a0