joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49d440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d512
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x388e6e1606037273
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x721d08fe65388e6e
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb0702090b04060a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a070b03040b07
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49d4ac
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x60]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x49d4de
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x49d505
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x60]
cmp rsi, 0xd
jb 0x49d492
jmp 0x49d4f5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00444ce0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00456b60
mov eax, edi
mov ecx, 0xd
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.0049d440

Function at 0x49dd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49de78
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x796e006de1bfba16
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x920796e006de1bf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x17276ec272d86665
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3adb6e6163750bdc
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe3afb7d6f7330770
mov qword [rsp + 0x36], rdx
movabs rdx, 0x191912031f1f1d20
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x10001e120c1d181c
mov qword [rsp + 0x46], rdx
movabs rdx, 0x211f10001e120c1d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11a1d1f1f1c1a1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a12111d14020e1b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x109091c02131105
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x49de15
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2a
jge 0x49de48
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x49de6b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
nop
cmp rsi, 0x22
jb 0x49ddfb
jmp 0x49de5f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x22
call fcn.00444ce0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00456b60
mov eax, edi
mov ecx, 0x22
call fcn.00456b60
nop
call fcn.004548e0
nop dword [rax]
jmp fcn.0049dd40
Function at 0x49e860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e946
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x30e661254f9c6f93
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1dca651f232030e6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa04070003060207
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6030a0407000306
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0009070c000307
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x49e8e0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x49e912
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49e937
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
cmp rsi, 0xe
jb 0x49e8c2
jmp 0x49e92b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00444ce0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456b60
mov eax, edi
mov ecx, 0xe
nop
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.0049e860

Function at 0x49f9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49fa8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x69706161ecee91d7
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x5cdd5fe2
movabs rdx, 0x1030b02090b0204
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa08030a09000103
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49fa25
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x49fa5c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x49fa7f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 0xc
jb 0x49fa0b
jmp 0x49fa73
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00444ce0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456b60
mov eax, edi
mov ecx, 0xc
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.0049f9c0
Function at 0x4a0820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a090a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8fa872d5766eeeaf
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x99676e7972ac8fa8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8264927dba546499
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1301081108041506
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0711150d030413
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4081512060e0600
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a08ad
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x4a08da
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a08fd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a0890
jmp 0x4a08f1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00444ce0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456b60
mov eax, edi
mov ecx, 0x16
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004a0820

Function at 0x4a0920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a0a1b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa0504ec66126cd43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa1c9a430a0504ec6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57d52283ca73d1ca
mov qword [rsp + 0x26], rdx
movabs rdx, 0x809090512120b12
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90f0a040212050a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110090f0a040212
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1211010c0111070d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a09b9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a09eb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4a0a0e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0x14
jb 0x4a099f
jmp 0x4a0a02
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00444ce0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456b60
mov eax, edi
mov ecx, 0x14
call fcn.00456b60
nop
nop dword [rax + rax]
call fcn.004548e0
jmp fcn.004a0920
Function at 0x4a12e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a13c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x829a72925d65704f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e7a6b915e7e8094
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb07060c0a08040b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x606090c0b07060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa090c0e0307030b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a1360
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4a1392
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4a13b7
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0x10
jb 0x4a1342
jmp 0x4a13ab
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00444ce0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456b60
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004a12e0

Function at 0x4a18a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a197d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4dd165dc30d0ecf2
mov qword [rsp + 0x18], rdx
movabs rdx, 0xcdcc65ee265d6eb2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70c0b0a06020808
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1040f0306080c0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6080b0b0e0e0f
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a1920
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4a194d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4a1970
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4a1902
jmp 0x4a1964
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00444ce0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456b60
mov eax, edi
mov ecx, 0x10
call fcn.00456b60
nop
nop dword [rax]
call fcn.004548e0
jmp fcn.004a18a0
Function at 0x4a41e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a42ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa1a66528d6eb7243
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcd7e4a1a66528d6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x703030602090804
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9020704060a0302
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a424f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4a427c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4a429f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4a4232
jmp 0x4a4293
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00444ce0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456b60
mov eax, edi
mov ecx, 0xb
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004a41e0

Function at 0x4a6460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a653d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xee6ca4e73d2b0d6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xad49ab6666df4c3a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20707070d050804
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0f090f0e020207
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80e060204040100
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a64e0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4a650d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4a6530
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x4a64c2
jmp 0x4a6524
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00444ce0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456b60
mov eax, edi
mov ecx, 0x10
call fcn.00456b60
nop
nop dword [rax]
call fcn.004548e0
jmp fcn.004a6460
Function at 0x4a69c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6a8c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7262be9fa7928ecf
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbe72767262be9fa7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x503040a08010008
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3020504
xor eax, eax
jmp 0x4a6a25
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4a6a5c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4a6a7f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0xb
jb 0x4a6a0b
jmp 0x4a6a73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00444ce0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456b60
mov eax, edi
mov ecx, 0xb
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004a69c0

Function at 0x4a6fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7086
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6ff76ed861d86547
mov qword [rsp + 0x18], rdx
movabs rdx, 0xaf5f6dec506c6ff7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30609030b090406
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20c030609030b09
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0306020b0a0909
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4a7020
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4a7052
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a7077
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
cmp rsi, 0xe
jb 0x4a7002
jmp 0x4a706b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00444ce0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456b60
mov eax, edi
mov ecx, 0xe
nop
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004a6fa0
Function at 0x4a77a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a789b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2622223c45746547
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9f3f2bd911e8ee26
mov qword [rsp + 0x24], rdx
movabs rdx, 0x34182ca8f369271d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf1206160e150b0a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40d0d13090d0815
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x14070f0a040d0d13
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0410150f080b05
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a7839
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4a786b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4a788e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x17
jb 0x4a781f
jmp 0x4a7882
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00444ce0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456b60
mov eax, edi
mov ecx, 0x17
call fcn.00456b60
nop
nop dword [rax + rax]
call fcn.004548e0
jmp fcn.004a77a0

Function at 0x4a7de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7eec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e615d8c46af857a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6a6d434e6881a286
mov qword [rsp + 0x21], rdx
movabs rdx, 0x626a6d434e6881a2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8465867b7c614872
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1608011416090202
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90018110a040908
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x7150d1002150900
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf1105110f110216
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a7e88
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a7ebc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4a7edf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x19
jb 0x4a7e6e
jmp 0x4a7ed3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00444ce0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456b60
mov eax, edi
mov ecx, 0x19
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004a7de0
Function at 0x4a8280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8366
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5ea6ede892ac6f1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x95656d614e9dad61
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0a010a000f0101
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x907020202090a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x104040307060a00
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a8300
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4a8332
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4a8357
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 0x10
jb 0x4a82e2
jmp 0x4a834b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00444ce0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456b60
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004a8280

Function at 0x4a8ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8dcc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9a956f6853746886
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7d9a956f68537468
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x576ad26181848d7e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x607060b0e000e0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1080607060b0e00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0a09060b060c0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a8d6a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x29]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4a8d9c
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a8dbf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x29]
cmp rsi, 0x11
jb 0x4a8d50
jmp 0x4a8db3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00444ce0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456b60
mov eax, edi
mov ecx, 0x11
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004a8ce0
Function at 0x4abe40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abf3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7269023ce71c2e2a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x16e86e65ea226f72
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd49f6c2a9b697214
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1602010f0a04
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe040e1215030105
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x15040e040e121503
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10902130d010203
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4abed9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4abf0b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4abf2e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 0x17
jb 0x4abebf
jmp 0x4abf22
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00444ce0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456b60
mov eax, edi
mov ecx, 0x17
call fcn.00456b60
nop
nop dword [rax + rax]
call fcn.004548e0
jmp fcn.004abe40

Function at 0x4add40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ade2a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f11c4060f7465f4
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd148b721ef6f11c4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6e6f8e74612a729d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc08090c040b0312
mov qword [rsp + 0x30], rdx
movabs rdx, 0x512040c0400120f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8000b0d060d090a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4addcd
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4addfa
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ade1d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4addb0
jmp 0x4ade11
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00444ce0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456b60
mov eax, edi
mov ecx, 0x15
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004add40
Function at 0x4ae1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae2bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5e4d6b6479745047
mov qword [rsp + 0x18], rdx
movabs rdx, 0x697b6544576c4964
mov qword [rsp + 0x20], rdx
movabs rdx, 0x655e706f3f5e6072
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60e031317070e0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1101070305010615
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb150e0812050e12
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0e0416070c0912
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ae259
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x4ae28b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4ae2ae
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x18
jb 0x4ae23f
jmp 0x4ae2a2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00444ce0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456b60
mov eax, edi
mov ecx, 0x18
call fcn.00456b60
nop
nop dword [rax + rax]
call fcn.004548e0
jmp fcn.004ae1c0

Function at 0x4bee80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bef46
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x32c66970d14bce61
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x59189544
movabs rdx, 0x20a0b0802080b0a
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x1030609
xor eax, eax
jmp 0x4beee0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4bef12
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4bef37
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0xc
jb 0x4beec4
jmp 0x4bef2b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00444ce0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456b60
mov eax, edi
mov ecx, 0xc
nop
call fcn.00456b60
nop
call fcn.004548e0
jmp fcn.004bee80