joyce8/EMBER2024-capa huggingface dataset:
Function at 0x48a4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a5fd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x1734332615f71a22
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x313233321c2d1e35
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3748313443fe3132
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2b4e143503191d23
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7160b100b1900
mov qword [rsp + 0x38], rdx
movabs rdx, 0x171010090302161b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb041d1801030f16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d18081c00111806
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa0b081417001b13
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x48a5a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x48a5cd
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x48a5f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x48a57d
jmp 0x48a5e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461020
mov eax, edi
mov ecx, 0x1e
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0048a4e0

Function at 0x48c200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c32c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x30ebf7b2e932327c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf4ec32743430ebf7
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb38e83830b3baeb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x31a9f799333632c2
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa86b364a9536e7dc
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9200b1920230d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1a0f0324000d051b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x19050c0315140d09
mov qword [rsp + 0x50], rdx
movabs rdx, 0x141a04090d21090e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x609121e0d09001d
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48c2c6
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x19]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x28
jge 0x48c2fc
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x48c31f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x19]
cmp rsi, 0x25
jb 0x48c2ac
jmp 0x48c313
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00461020
mov eax, edi
mov ecx, 0x25
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0048c200
Function at 0x48c340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c467
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x9cee32f33005f206
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xeae908f0f2999cee
mov qword [rsp + 0x20], rdx
movabs rdx, 0x33323430b3353635
mov qword [rsp + 0x28], rdx
movabs rdx, 0x393038cc8dee0836
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5816c7bf30f0f1ee
mov qword [rsp + 0x38], rdx
movabs rdx, 0x718042008070619
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc1e250b23170406
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f000d220b1f0117
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a02000800110806
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2402020d2200090a
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48c409
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x28
jge 0x48c437
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x26
jae 0x48c45a
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x26
jb 0x48c3ec
jmp 0x48c44e
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00461020
mov eax, edi
mov ecx, 0x26
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0048c340
Function at 0x4941a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4942d8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x46fb6fd546cb192e
mov qword [rsp + 0x18], rdx
movabs rdx, 0xce65786846fb6fd5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3ce6f9232b20281c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf4e8d205e2d8de49
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3809cfca23632f98
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1804151b1a201808
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb21171b19220014
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1d0417110b21171b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c0f120c1f00060d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80201171f021613
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d131b10180b0b0f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x494275
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4942a8
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x4942cb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
nop
cmp rsi, 0x24
jb 0x49425b
jmp 0x4942bf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00461020
mov eax, edi
mov ecx, 0x24
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004941a0
Function at 0x496e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x496edd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x43bf3657326611e
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xf2
movabs rdx, 0x606060705020008
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8020002
xor eax, eax
nop
jmp 0x496e80
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x496ead
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x496ed0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x496e62
jmp 0x496ec4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00496e20

Function at 0x497020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4970dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1fae55f8731b100d
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x16
movabs rdx, 0x101000408080106
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x702
xor eax, eax
nop
jmp 0x497080
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4970ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4970d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x497062
jmp 0x4970c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00497020
Function at 0x4a2060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a211d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x969066686588c9b8
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xcf
movabs rdx, 0x608000408020102
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7040204
xor eax, eax
nop
jmp 0x4a20c0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x17]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4a20ed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a2110
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4a20a2
jmp 0x4a2104
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004a2060
Function at 0x4a2b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2c6c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x9d9bd76f6874a5b7
mov qword [rsp + 0x19], rdx
movabs rdx, 0xaff12088439d9bd7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20658e4953aea1b9
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc75d8264d1564207
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6eb3ca4fc194ac97
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80b08011a180808
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1d15080b08011a18
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6211c2223070e23
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe05000f1c0b170e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c1c110e22090c0d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5011e1d101f0120
mov qword [rsp + 0x60], rdx
movabs rdx, 0x80b071b11091201
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4a2c04
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x32
jge 0x4a2c3c
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x4a2c5f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x25
jb 0x4a2bea
jmp 0x4a2c53
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.0044bb20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00461020
mov eax, edi
mov ecx, 0x25
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004a2b20

Function at 0x4a3020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a311d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7582806c88558d70
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6362749b2096658d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb66576668494206b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x170c130104080202
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0115060e0a150a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x3080c0115060e0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x417120805130108
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a30c0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4a30ed
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a3110
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4a309f
jmp 0x4a3104
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004a3020
Function at 0x4a5360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a548c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6874b6e220663b20
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x176874b6e220663b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x161c402f6e900459
mov qword [rsp + 0x28], rdx
movabs rdx, 0x614eea2bde18ceec
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe3924e629e913cc
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b051712090b120f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1160f0a19201a10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x91d08200e1f1004
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15011d0d140d1b11
mov qword [rsp + 0x58], rdx
movabs rdx, 0x10051a1c0f1e0913
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4a5426
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x28
jge 0x4a545c
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x4a547f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0x21
jb 0x4a540c
jmp 0x4a5473
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00461020
mov eax, edi
mov ecx, 0x21
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004a5360
Function at 0x4a71e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a72fa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x3a09c8652166338c
mov qword [rsp + 0x19], rdx
movabs rdx, 0xeb669e7119652fbf
mov qword [rsp + 0x21], rdx
movabs rdx, 0x72dd61d3be27c6eb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20eeee796aed0961
mov qword [rsp + 0x30], rdx
movabs rdx, 0x131d0f0d0d12191c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x113151210050f03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x61a090101181300
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf100c19060b0111
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a0b080301061518
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a7297
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x28
jge 0x4a72c9
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4a72ed
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x1f
jb 0x4a727d
jmp 0x4a72e1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.0044bb20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00461020
mov eax, edi
mov ecx, 0x1f
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.004a71e0
Function at 0x4a7d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7e2c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7df56365016607ef
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x61157df563650166
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x17b802558759f696
mov qword [rsp + 0x24], rdx
movabs rdx, 0x103031107100b08
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0c0f0a01030311
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10000d0d060f0c01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a7dca
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x4a7dfc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a7e1f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x12
jb 0x4a7db0
jmp 0x4a7e13
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004a7d40

Function at 0x4a8480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4a85ec
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x3aa0f0aa8d987671
mov qword [rsp + 0x19], rdx
movabs rdx, 0xef9f726d456eab99
mov qword [rsp + 0x21], rdx
movabs rdx, 0xde72e07b7cef9f72
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6176ea699dec9e6f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8074de6fbc64879d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x76429cbf690fd5a4
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x50f1a05291d221e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x202117011804120e
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x140e202117011804
mov qword [rsp + 0x50], rdx
movabs rdx, 0x609241001252618
mov qword [rsp + 0x58], rdx
movabs rdx, 0x22c0c0c051e2503
mov qword [rsp + 0x60], rdx
movabs rdx, 0x160529012b0e160e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x18271a1d0c18181a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1e080b2a2c0e11
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4a8587
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x3a
jge 0x4a85bc
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x4a85df
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 0x2d
jb 0x4a856d
jmp 0x4a85d3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.0044bb20
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00461020
mov eax, edi
mov ecx, 0x2d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004a8480
Function at 0x4a8600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a86dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2f0df31b76eed500
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x273c036cd456392f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc08010702070404
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0e0c080107
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd07070e060d0508
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a8680
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4a86ad
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4a86d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4a8662
jmp 0x4a86c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004a8600

Function at 0x4ab580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x60]
cmp r12, qword [r14 + 0x10]
jbe 0x4ab6fb
push rbp
mov rbp, rsp
sub rsp, 0xd8
movabs rdx, 0x8f72c3b56801d34d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb3846320a27e188a
mov qword [rsp + 0x27], rdx
movabs rdx, 0xca209c796cb38463
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7726054d3cbb208c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6894427909c4875e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x8673c1e19cbf9f61
mov qword [rsp + 0x44], rdx
movabs rdx, 0x656986300474b10f
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x2f7376dd206e61fe
mov qword [rsp + 0x54], rdx
movabs rdx, 0x60206440316c69da
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x6575b8b356848561
mov qword [rsp + 0x64], rdx
movabs rdx, 0x353c04290f3a2129
mov qword [rsp + 0x6c], rdx
movabs rdx, 0x21a1f0435320e2d
mov qword [rsp + 0x74], rdx
lea rdi, [rsp + 0x78]
lea rsi, [0x00a320d4]
nop word [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046164c
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4ab691
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x6c
jge 0x4ab6c8
movzx edx, byte [rsp + rax + 0x6c]
movzx esi, byte [rsp + rax + 0x6d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x4d
jae 0x4ab6ee
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
nop dword [rax + rax]
cmp rsi, 0x4d
jb 0x4ab677
jmp 0x4ab6e2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x4d
call fcn.0044bb20
add rsp, 0xd8
pop rbp
ret
mov eax, esi
mov ecx, 0x4d
call fcn.00461020
mov eax, edi
mov ecx, 0x4d
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004ab580
Function at 0x4ac260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x4ac3b5
push rbp
mov rbp, rsp
sub rsp, 0xb0
movabs rdx, 0x6474391855667ef3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x666f206c6ca65820
mov qword [rsp + 0x24], rdx
movabs rdx, 0xdf658120666f206c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x82bb4ace619e484
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4b20aa652aa9cd10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xeebe1772da7776a0
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd46d614a6ed3ccd0
mov qword [rsp + 0x48], rdx
movabs rdx, 0x693f92615620eb91
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3923321524141434
mov qword [rsp + 0x58], rdx
lea rdi, [rsp + 0x60]
lea rsi, [0x00a30398]
nop word [rax + rax]
nop word [rax + rax]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046165a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4ac354
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x58
jge 0x4ac382
movzx edx, byte [rsp + rax + 0x58]
movzx esi, byte [rsp + rax + 0x59]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3c
jae 0x4ac3a8
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x3c
jb 0x4ac337
nop
jmp 0x4ac39c
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x3c
call fcn.0044bb20
add rsp, 0xb0
pop rbp
ret
mov eax, esi
mov ecx, 0x3c
call fcn.00461020
mov eax, edi
mov ecx, 0x3c
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ac260

Function at 0x4ad080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad146
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1a575332205f2058
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x2a
movabs rdx, 0x208000706070205
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060405
xor eax, eax
nop
jmp 0x4ad0e0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4ad112
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4ad137
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 9
jb 0x4ad0c2
jmp 0x4ad12b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ad080