joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49d300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d3fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x301f250927fb2517
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xefec312c2c2f301f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x16f61c342edd0f02
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1510040f0c140d04
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0a0a1413061302
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5090c0e0d14000a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0e08030c100106
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x49d3a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x49d3cd
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x49d3f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x49d37f
jmp 0x49d3e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0049d300

Function at 0x49d980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49da7d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3856653d7529e861
mov qword [rsp + 0x18], rdx
movabs rdx, 0x49005f696c443856
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x136e556c203d6f1f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0d061302041010
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x104070d0e0e1508
mov qword [rsp + 0x36], rdx
movabs rdx, 0x40d0104070d0e0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0e071507150e07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49da20
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x49da4d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x49da70
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x49d9ff
jmp 0x49da64
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0049d980
Function at 0x49e400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e51a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xfba2de8272b59b7c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb5b865c443adb36e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x869d69aea3b5b865
mov qword [rsp + 0x28], rdx
movabs rdx, 0x73d4b1723b797291
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1306100718010e05
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0c01041b04100c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0e0400110b020f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x101b1a0f04141500
mov qword [rsp + 0x50], rdx
movabs rdx, 0x17020f0b100b1009
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x49e4b7
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x28
jge 0x49e4e9
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x49e50d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0x1d
jb 0x49e49d
jmp 0x49e501
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.0049e400

Function at 0x49e540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e61d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e8f7a7d61767b69
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x656774738b827858
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80d0c04040b0d08
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8080a070507080d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x701010806070c0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x49e5c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x49e5ed
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x49e610
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x49e5a2
jmp 0x49e604
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0049e540
Function at 0x49ec40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ed0c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3d7365cc024661d3
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe048613d7365cc02
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2030909000a070a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3020904
xor eax, eax
jmp 0x49eca5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x49ecdc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x49ecff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0xb
jb 0x49ec8b
jmp 0x49ecf3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0049ec40

Function at 0x49f5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f69d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe9aa6fc6aa610276
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6cdfabf6e9aa6fc6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa2d95d72aa9596e9
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa120e01120c120a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd000e0d03110709
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1113110d0d000e0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x413020f02080609
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49f640
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x49f66d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x49f690
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x49f61f
jmp 0x49f684
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0049f5a0
Function at 0x4a0520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a060c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6974bb65b2c3c41b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xbc6f6974bb65b2c3
mov qword [rsp + 0x30], rdx
movabs rdx, 0x66573046662725c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x311000c110a1105
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe000311000c110a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50001030e02090c
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4a05aa
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x4a05dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a05ff
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x12
jb 0x4a0590
jmp 0x4a05f3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a0520

Function at 0x4a0d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a0e8c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x462720c4ce20d4ce
mov qword [rsp + 0x19], rdx
movabs rdx, 0x272d23181b222620
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1e272d23181b2226
mov qword [rsp + 0x22], rdx
movabs rdx, 0x649ad1276f763120
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb15090615071205
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20b100103160c17
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe040f0a0f0c020b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1002030d0d00160e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a0e28
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a0e5c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4a0e7f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x19
jb 0x4a0e0e
jmp 0x4a0e73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a0d80
Function at 0x4a0ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a0fbd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xaf936eaba359787d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x727564616b6e9a69
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5da11c3772756461
mov qword [rsp + 0x24], rdx
movabs rdx, 0x648e7c5d8a606572
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100e161116131811
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1130602100e1611
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1219181303091a04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71704020e0b0909
mov qword [rsp + 0x48], rdx
movabs rdx, 0x41a091719030002
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a0f60
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4a0f8d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4a0fb0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4a0f3d
jmp 0x4a0fa4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a0ea0

Function at 0x4a2dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2ecc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20732787ecdf65cb
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb0dd22e365fd6516
mov qword [rsp + 0x25], rdx
movabs rdx, 0xcdda20b0dd22e365
mov qword [rsp + 0x28], rdx
movabs rdx, 0x29632eddd13e3020
mov qword [rsp + 0x30], rdx
movabs rdx, 0x120f111a0c110e17
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf1818161514030a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20308050c00170d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120c0a0e0a0a0a04
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a2e68
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a2e9c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x4a2ebf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x1b
jb 0x4a2e4e
jmp 0x4a2eb3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00451880
mov eax, edi
mov ecx, 0x1b
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a2dc0
Function at 0x4a3ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3ba6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x533053fa7065228
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9865086545053305
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1040c080c040307
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20001040c080c04
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0707020a080405
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4a3b40
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4a3b72
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4a3b97
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0xd
jb 0x4a3b22
jmp 0x4a3b8b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a3ac0

Function at 0x4a3bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3cec
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x48742e946a85617f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8f837c6363684874
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6b64658e766d6176
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4d651c3a7073a42b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x793f53723f167a2e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd040e1517081202
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1e200e080c190e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x100007161e1a0519
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1621241d19110b1b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x23051f1b03110b17
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4a3c86
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x28
jge 0x4a3cbc
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x26
jae 0x4a3cdf
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x26
jb 0x4a3c6c
jmp 0x4a3cd3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00451880
mov eax, edi
mov ecx, 0x26
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a3bc0
Function at 0x4a4d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4e2c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6d343020e7fda5f3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3f74de3920c365fc
mov qword [rsp + 0x26], rdx
movabs rdx, 0x32fa3a41a020fd10
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1414000f150c1308
mov qword [rsp + 0x36], rdx
movabs rdx, 0x11051414000f150c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16010d020a08080d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x808050a03010213
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10080117060d1617
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a4dc8
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4a4dfc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4a4e1f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x18
jb 0x4a4dae
jmp 0x4a4e13
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a4d20

Function at 0x4a52c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a53aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x73e561ebe8ebebe7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x98752073e561ebe8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8882d9996669ed76
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0706110b1007
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100b120b0411030a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60f0f0902010d0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a534d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4a537a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a539d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4a5330
jmp 0x4a5391
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a52c0
Function at 0x4a6a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6b9d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa92051ba399aa694
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaf727b8e7e98abe4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8c9aaf727b8e7e98
mov qword [rsp + 0x24], rdx
movabs rdx, 0x82a189346c69c58c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x16100f17090b0507
mov qword [rsp + 0x34], rdx
movabs rdx, 0x16190b1216100f17
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa1808130803000c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x207080408010403
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd05130503011711
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a6b40
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4a6b6d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a6b90
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a6b1d
jmp 0x4a6b84
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a6a80

Function at 0x4aa1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa2f8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6f7d2065686c6144
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4b778e55746f7d20
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8b203f6f640e7053
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9720646d58695063
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8a71826520616cf8
mov qword [rsp + 0x36], rdx
movabs rdx, 0x18181223030d0c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1d1606211c221518
mov qword [rsp + 0x46], rdx
movabs rdx, 0x16061d1606211c22
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa190e10060f090f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x24140b0e0d1e0008
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1918121e0e0c03
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4aa298
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2a
jge 0x4aa2c8
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4aa2eb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x25
jb 0x4aa27b
jmp 0x4aa2df
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00451880
mov eax, edi
mov ecx, 0x25
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004aa1c0
Function at 0x4ab220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab2f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf6a4f815018e7205
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf06f72fe907af6a4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40a020804020a09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70d050206080003
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ab28c
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ab2be
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ab2e5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0xe
jb 0x4ab272
jmp 0x4ab2d5
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ab220

Function at 0x4abe60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4abfcc
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x70b78cacc5746eaf
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x81a3b29e23c7e787
mov qword [rsp + 0x23], rdx
movabs rdx, 0x205a9581a3b29e23
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9268b6716cbdbd97
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6db36516cb006c60
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb2e17472c099cdb6
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x3100e2a290e1f1b
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1f0f04142009240b
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x18151f0f04142009
mov qword [rsp + 0x50], rdx
movabs rdx, 0x24260b211b0f0a0d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x625111e201f2305
mov qword [rsp + 0x60], rdx
movabs rdx, 0x51a000c20171d1f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x221009212213111f
mov qword [rsp + 0x70], rdx
movabs rdx, 0xb030c1008112625
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4abf67
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x3a
jge 0x4abf9c
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2b
jae 0x4abfbf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
cmp rsi, 0x2b
jb 0x4abf4d
jmp 0x4abfb3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2b
call fcn.00441380
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
call fcn.00451880
mov eax, edi
mov ecx, 0x2b
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004abe60