joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4823a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x482452
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6e8d85989ec76592
mov qword [rsp + 0x20], rdx
movabs rdx, 0x400030402040605
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4823f1
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x48241e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x482445
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4823d4
jmp 0x482435
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0045af60
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.004605c0
mov eax, edi
mov ecx, 8
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004823a0

Function at 0x486300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4863c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x616c4c42f0594b4e
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x40
movabs rdx, 0x402040301010508
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x200
xor eax, eax
nop
jmp 0x486360
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x486392
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4863b7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 9
jb 0x486342
jmp 0x4863ab
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004605c0
mov eax, edi
mov ecx, 9
nop
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.00486300

Function at 0x487860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487926
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf8de414ae9e065df
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x65cbcef8
movabs rdx, 0x605080804090702
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x60903
xor eax, eax
jmp 0x4878c0
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4878f2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x487917
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
cmp rsi, 0xb
jb 0x4878a4
jmp 0x48790b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004605c0
mov eax, edi
mov ecx, 0xb
nop
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.00487860
Function at 0x4885c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4886ac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74e69aed5fdffffd
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x6874e69aed5fdfff
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6ef76902f9c9f25f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1050a020c0d050d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x101050a020c0d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x40b0a0c060f0a0c
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x48864a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x48867c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48869f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0x11
jb 0x488630
jmp 0x488693
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004605c0
mov eax, edi
mov ecx, 0x11
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004885c0

Function at 0x488a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488b1e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc10695aa19b46c4f
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x15c1acc1
movabs rdx, 0xa07040508030609
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x8070902
xor eax, eax
jmp 0x488ac1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x488aee
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x488b11
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x488aa4
jmp 0x488b05
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004605c0
mov eax, edi
mov ecx, 0xb
call fcn.004605c0
nop
nop
call fcn.0045e2e0
jmp fcn.00488a60
Function at 0x488f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48902c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xea326f5308642421
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x68ea326f53086424
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3361aa6243334114
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe060906010c010e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30e060906010c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7100c00070c0b03
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x488fca
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x488ffc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48901f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x11
jb 0x488fb0
jmp 0x489013
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004605c0
mov eax, edi
mov ecx, 0x11
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.00488f40

Function at 0x489e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489f38
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc716114135c768b5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6040305050506
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x3040207
xor eax, eax
jmp 0x489ed9
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x489f08
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x489f2b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x489ebc
jmp 0x489f1f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004605c0
mov eax, edi
mov ecx, 8
call fcn.004605c0
nop
call fcn.0045e2e0
nop dword [rax]
jmp fcn.00489e80

Function at 0x48b280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b338
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x747677905f696b8d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x406000506050101
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x506
xor eax, eax
jmp 0x48b2d8
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x48b308
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x48b32b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x48b2bb
jmp 0x48b31f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004605c0
mov eax, edi
mov ecx, 8
call fcn.004605c0
nop
call fcn.0045e2e0
nop dword [rax]
jmp fcn.0048b280
Function at 0x48d960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48da38
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7cd07e5f80696fe6
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xfceffc74
movabs rdx, 0xa07070500070309
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb090a0707050007
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x300030006000505
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x48d9d4
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x48da08
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x48da2b
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
nop
cmp rsi, 0xc
jb 0x48d9ba
jmp 0x48da1f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0045af60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004605c0
mov eax, edi
mov ecx, 0xc
call fcn.004605c0
nop
call fcn.0045e2e0
nop dword [rax]
jmp fcn.0048d960
Function at 0x49e8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e9bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x75706d185b2572d5
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc8c274c820646ea5
mov qword [rsp + 0x40], rdx
movabs rdx, 0xdc65c1664ecdaab2
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf10040c04100402
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1204040804021713
mov qword [rsp + 0x22], rdx
movabs rdx, 0x17120f0c00021204
mov qword [rsp + 0x28], rdx
movabs rdx, 0x911110e0815030e
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49e959
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1e
jge 0x49e98b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49e9ae
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x18
jb 0x49e93f
jmp 0x49e9a2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0045af60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004605c0
mov eax, edi
mov ecx, 0x18
call fcn.004605c0
nop
nop dword [rax + rax]
call fcn.0045e2e0
jmp fcn.0049e8c0

Function at 0x49e9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49eacc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74d38e7078bf6e75
mov qword [rsp + 0x32], rdx
movabs rdx, 0x74086d90d4de74d3
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7071bd73468fa1a2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80e0c090f06140a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0205100a11080e
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0c0f090e0e0c13
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x49ea6a
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x49ea9c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x49eabf
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x16
jb 0x49ea50
jmp 0x49eab3
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004605c0
mov eax, edi
mov ecx, 0x16
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.0049e9e0
Function at 0x4a1b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a1c1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xeab063e4e56665a3
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xf5
movabs rdx, 0x800050503050607
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x4040305
xor eax, eax
nop
jmp 0x4a1bc0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4a1bed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a1c10
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4a1ba2
jmp 0x4a1c04
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004605c0
mov eax, edi
mov ecx, 9
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004a1b60

Function at 0x4a3be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3d0c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x2e740a6573c3a772
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x7c0d18d56572ed20
mov qword [rsp + 0x52], rdx
movabs rdx, 0xef6175c481537c0d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x85651421ce296469
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1a181505191a0d02
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5051b130711031d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x118100505051b13
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf01120909110e0e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1a0a010c03021a0a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x121d031b011b0507
mov qword [rsp + 0x42], rdx
xor eax, eax
jmp 0x4a3ca6
movzx r9d, byte [rsp + rsi + 0x4a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4e]
mov byte [rsp + rdi + 0x4a], dl
mov byte [rsp + rsi + 0x4a], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4a3cdc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1e
jae 0x4a3cff
movzx r8d, byte [rsp + rdi + 0x4a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4e]
cmp rsi, 0x1e
jb 0x4a3c8c
jmp 0x4a3cf3
xor eax, eax
lea rbx, [rsp + 0x4a]
mov ecx, 0x1e
call fcn.0045af60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.004605c0
mov eax, edi
mov ecx, 0x1e
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004a3be0
Function at 0x4a3d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3e4c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x9345636598ae6599
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x8b209345636598ae
mov qword [rsp + 0x40], rdx
movabs rdx, 0x648969cba6bb8eca
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6f20859b6f00af65
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80647775af565066
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd0c1c1b1b14100a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x161d1d130d0c1c1b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x716131c02030917
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb00101006000e06
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90a031021091f0d
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4a3de6
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x24
jge 0x4a3e1c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x4a3e3f
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
cmp rsi, 0x22
jb 0x4a3dcc
jmp 0x4a3e33
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.0045af60
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.004605c0
mov eax, edi
mov ecx, 0x22
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004a3d20

Function at 0x4a4980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4a6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4e9463ca6c66a960
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb8564e9463ca6c66
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8670adbe7f65756c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70e0f0104010711
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x110d010f070e0f09
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe11060e060104
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a4a0a
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a4a3c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a4a5f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x12
jb 0x4a49f0
jmp 0x4a4a53
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004605c0
mov eax, edi
mov ecx, 0x12
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004a4980
Function at 0x4a9f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4aa067
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xffad6b7f49703cf5
mov qword [rsp + 0x56], rdx
movabs rdx, 0x7310a965756c6156
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x6c6c7310a965756c
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc511b56ec9a95865
mov qword [rsp + 0x68], rdx
movabs rdx, 0xd5970a9324606103
mov qword [rsp + 0x70], rdx
movabs rdx, 0xd16fbaba36e49869
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1200d0501131d07
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x27181f1a0405000d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1e1e27181f1a0405
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1a0713251f0e0026
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2419141d2625061a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1323171c24152023
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x14000f0729180e1f
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1529260d0e212725
mov qword [rsp + 0x4e], rdx
xor eax, eax
jmp 0x4aa00a
movzx r9d, byte [rsp + rsi + 0x56]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x56], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x56], dl
add rax, 2
cmp rax, 0x3a
jge 0x4aa037
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x4aa05a
movzx r8d, byte [rsp + rdi + 0x56]
sub r8d, edx
cmp rsi, 0x2a
jb 0x4a9fed
jmp 0x4aa04e
xor eax, eax
lea rbx, [rsp + 0x56]
mov ecx, 0x2a
call fcn.0045af60
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.004605c0
mov eax, edi
mov ecx, 0x2a
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004a9f00

Function at 0x4ac4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac59d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x65d328f01c978ab6
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6e
movabs rdx, 0x306000302040106
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x405
xor eax, eax
nop
jmp 0x4ac540
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4ac56d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4ac590
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4ac522
jmp 0x4ac584
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004605c0
mov eax, edi
mov ecx, 9
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004ac4e0
Function at 0x4ae4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x4ae63b
push rbp
mov rbp, rsp
sub rsp, 0xa8
movabs rdx, 0xe0746d6557327072
mov qword [rsp + 0x6d], rdx
movabs rdx, 0x211212945162e117
mov qword [rsp + 0x75], rdx
movabs rdx, 0x2a05e12112129451
mov qword [rsp + 0x78], rdx
movabs rdx, 0x23e6c2b412c750b
mov qword [rsp + 0x80], rdx
movabs rdx, 0x6942ee6f1a6e6720
mov qword [rsp + 0x88], rdx
movabs rdx, 0x4e3cfb694b61531d
mov qword [rsp + 0x90], rdx
movabs rdx, 0xa5d03fd68ef1886
mov qword [rsp + 0x98], rdx
movabs rdx, 0x7213743a69608820
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x71907351f05280d
mov qword [rsp + 0x19], rdx
lea rdi, [rsp + 0x1d]
lea rsi, [0x005a66d8]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00460bda
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4ae5d1
movzx r9d, byte [rsp + rsi + 0x6d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x6d], dl
mov byte [rsp + rsi + 0x6d], r8b
add rax, 2
cmp rax, 0x54
jge 0x4ae608
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3b
jae 0x4ae62e
movzx r8d, byte [rsp + rdi + 0x6d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
nop dword [rax + rax]
cmp rsi, 0x3b
jb 0x4ae5b7
jmp 0x4ae622
xor eax, eax
lea rbx, [rsp + 0x6d]
mov ecx, 0x3b
call fcn.0045af60
add rsp, 0xa8
pop rbp
ret
mov eax, esi
mov ecx, 0x3b
call fcn.004605c0
mov eax, edi
mov ecx, 0x3b
call fcn.004605c0
nop
nop dword [rax + rax]
call fcn.0045e2e0
jmp fcn.004ae4e0

Function at 0x4aecc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aedf8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xfc0e1b2927665e4e
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x6575435a5bfc0e1b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3f0a154e46073e67
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7969534d6f16207b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x4c7e696c73240574
mov qword [rsp + 0x68], rdx
movabs rdx, 0x24081307171e0e0f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa1f141a0a030506
mov qword [rsp + 0x27], rdx
movabs rdx, 0x100d00060a1f141a
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x41a0919111e0512
mov qword [rsp + 0x33], rdx
movabs rdx, 0x140d0d0115230a0d
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x170d051f1b011112
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4aed98
movzx r9d, byte [rsp + rsi + 0x4b]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x4b], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x4b], dl
add rax, 2
cmp rax, 0x2c
jge 0x4aedc8
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4aedeb
movzx r8d, byte [rsp + rdi + 0x4b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x25
jb 0x4aed7b
jmp 0x4aeddf
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.0045af60
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.004605c0
mov eax, edi
mov ecx, 0x25
call fcn.004605c0
nop
call fcn.0045e2e0
nop dword [rax]
jmp fcn.004aecc0