joyce8/EMBER2024-capa huggingface dataset:
Function at 0x482d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x482dcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe93b5f65da46d9d1
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xeb755bc76be93b5f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc02060a060a0200
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x70c010300090c02
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x482d6f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x482d9c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x482dbf
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x482d52
jmp 0x482db3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456620
mov eax, edi
mov ecx, 0xd
call fcn.00456620
nop
call fcn.00454340
jmp fcn.00482d00

Function at 0x483a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483b46
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x67616e746c6b6a4e
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x5a6a7167
movabs rdx, 0x401030408090204
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0xa09010a
xor eax, eax
jmp 0x483ae0
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xc]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x483b12
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x483b37
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xc]
cmp rsi, 0xb
jb 0x483ac4
jmp 0x483b2b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456620
mov eax, edi
mov ecx, 0xb
nop
call fcn.00456620
nop
call fcn.00454340
jmp fcn.00483a80

Function at 0x487100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4871bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7364594c54604c67
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x65
movabs rdx, 0x400050600010503
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x602
xor eax, eax
nop
jmp 0x487160
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x48718d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4871b0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x487142
jmp 0x4871a4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456620
mov eax, edi
mov ecx, 9
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.00487100
Function at 0x4896e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4897ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e1f26495f535435
mov qword [rsp + 0x34], rdx
movabs rdx, 0x317958136e1f2649
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc96f746138657019
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80c06010b0b1301
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9100c0605100500
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0c080608040c08
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x48976d
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x18
jge 0x48979a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4897bd
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x489750
jmp 0x4897b1
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456620
mov eax, edi
mov ecx, 0x14
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004896e0

Function at 0x4897e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48989d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6b61724e545c6049
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x6336516b
movabs rdx, 0x902040202080307
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x7010702
xor eax, eax
jmp 0x489840
movzx r9d, byte [rsp + rsi + 0x25]
add edx, r9d
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop word [rax + rax]
cmp rax, 0xc
jge 0x48986d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x489890
movzx r8d, byte [rsp + rdi + 0x25]
add r8d, edx
cmp rsi, 0xb
jb 0x489824
jmp 0x489884
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456620
mov eax, edi
mov ecx, 0xb
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.004897e0
Function at 0x489f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a00c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf30c3a72e7fb2228
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7169276562236836
mov qword [rsp + 0x30], rdx
movabs rdx, 0x600030a0001010f
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa0d05080807020a
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x489faf
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x489fdc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x489fff
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x489f92
jmp 0x489ff3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456620
mov eax, edi
mov ecx, 0x10
call fcn.00456620
nop
call fcn.00454340
jmp fcn.00489f40

Function at 0x48a900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a9ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x44495f1e528fe1da
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1544495f1e528fe1
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe475a2b2746e2b43
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1003001008020403
mov qword [rsp + 0x19], rdx
movabs rdx, 0x410020e0a011003
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe0a0d00100d010d
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x48a98d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x16
jge 0x48a9ba
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48a9dd
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x48a970
jmp 0x48a9d1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456620
mov eax, edi
mov ecx, 0x11
call fcn.00456620
nop
call fcn.00454340
jmp fcn.0048a900
Function at 0x48bc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48bd3b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c03a36f499365ab
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9eff6c03a36f4993
mov qword [rsp + 0x38], rdx
movabs rdx, 0xef6f0c963a940059
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0905030c0e0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0f020a000c0b06
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe050c0f020a000c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa110805090d0300
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x48bcd9
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x48bd0b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x48bd2e
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
cmp rsi, 0x12
jb 0x48bcbf
jmp 0x48bd22
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456620
mov eax, edi
mov ecx, 0x12
call fcn.00456620
nop
nop dword [rax + rax]
call fcn.00454340
jmp fcn.0048bc40

Function at 0x48bd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48be4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x65b5a9fe97b71ea5
mov qword [rsp + 0x37], rdx
movabs rdx, 0xc765b5a9fe97b71e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc3aea88382729354
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa000c04080a0301
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf040305100c050d
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe0f05060203030f
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x48bded
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x48be1a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48be3d
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x48bdd0
jmp 0x48be31
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456620
mov eax, edi
mov ecx, 0x11
call fcn.00456620
nop
call fcn.00454340
jmp fcn.0048bd60
Function at 0x49a9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49aaec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2e69637bb4668b75
mov qword [rsp + 0x39], rdx
movabs rdx, 0x636a6c5364809e7c
mov qword [rsp + 0x41], rdx
movabs rdx, 0x61677368569ca763
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb772bca0824a8c74
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c1003091212091e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1a1b1918041113
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa091e040101101c
mov qword [rsp + 0x29], rdx
movabs rdx, 0xb080e1d0414061c
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x49aa88
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x20
jge 0x49aabc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x49aadf
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0x1f
jb 0x49aa6e
jmp 0x49aad3
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x1f
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00456620
mov eax, edi
mov ecx, 0x1f
call fcn.00456620
nop
call fcn.00454340
jmp fcn.0049a9e0

Function at 0x49c780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c888
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7a6f777963658970
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6f936c787395656e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x567774531684207e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x40f13171314150d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe15040f13171314
mov qword [rsp + 0x20], rdx
movabs rdx, 0x71006120b0a0a14
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50712171612140c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80a040f04060115
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49c82b
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
cmp rax, 0x22
jge 0x49c858
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49c87b
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x18
jb 0x49c80e
jmp 0x49c86f
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456620
mov eax, edi
mov ecx, 0x18
call fcn.00456620
nop
call fcn.00454340
jmp fcn.0049c780
Function at 0x49cea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cf8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbd63014618650e22
mov qword [rsp + 0x33], rdx
movabs rdx, 0xbd767c6465bd6301
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7025a9f5114617e7
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1213100704000e0c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd1311000f11000d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1105110a0003010e
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x49cf2a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x49cf5c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x49cf7f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0x15
jb 0x49cf10
jmp 0x49cf73
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456620
mov eax, edi
mov ecx, 0x15
call fcn.00456620
nop
call fcn.00454340
jmp fcn.0049cea0

Function at 0x49e160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e27a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x73eba3a4756cef86
mov qword [rsp + 0x43], rdx
movabs rdx, 0x6b69f1ceb68a126d
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x9ed37300be6b69f1
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5e976966a48c0d23
mov qword [rsp + 0x58], rdx
movabs rdx, 0x150d111a0d091611
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf1215181c0c1016
mov qword [rsp + 0x23], rdx
movabs rdx, 0x130f0b060d0b0104
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x17041b000f0b1c09
mov qword [rsp + 0x33], rdx
movabs rdx, 0x180a07170a14050d
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x49e217
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x28
jge 0x49e249
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x49e26d
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
cmp rsi, 0x1d
jb 0x49e1fd
jmp 0x49e261
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456620
mov eax, edi
mov ecx, 0x1d
call fcn.00456620
nop
call fcn.00454340
nop
jmp fcn.0049e160
Function at 0x49f000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f0bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3a622a656ca0e3e6
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x39
movabs rdx, 0x102080600060006
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x5020108
xor eax, eax
nop
jmp 0x49f060
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x49f08d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x49f0b0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x49f042
jmp 0x49f0a4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456620
mov eax, edi
mov ecx, 9
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.0049f000

Function at 0x49f460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x49f5bd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x423622e26c51654d
mov qword [rsp + 0x53], rdx
movabs rdx, 0x4d0eed65056e6957
mov qword [rsp + 0x5b], rdx
movabs rdx, 0xd772205a6c4d0eed
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb46d5569f523136f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x571a65625c4b4d3e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x575153f04a07546f
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1e2b1c120d232305
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x26180b061e2b1c12
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1406280826232804
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x29202a021d050024
mov qword [rsp + 0x33], rdx
movabs rdx, 0x6111812070e1816
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x232617181727281b
mov qword [rsp + 0x43], rdx
movabs rdx, 0x1a0f212c16291f0f
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x49f560
movzx r9d, byte [rsp + rsi + 0x53]
sub r9d, edx
lea edx, [r9 + 0x53]
mov byte [rsp + rdi + 0x53], dl
lea edx, [r8 + 0x53]
mov byte [rsp + rsi + 0x53], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x34
jge 0x49f58d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x49f5b0
movzx r8d, byte [rsp + rdi + 0x53]
sub r8d, edx
cmp rsi, 0x2d
jb 0x49f53e
jmp 0x49f5a4
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x2d
call fcn.00444780
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00456620
mov eax, edi
mov ecx, 0x2d
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.0049f460
Function at 0x4a0720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a07dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc4c3cbc41b647862
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x72
movabs rdx, 0x704030103060605
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x601
xor eax, eax
nop
jmp 0x4a0780
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4a07ad
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a07d0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4a0762
jmp 0x4a07c4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456620
mov eax, edi
mov ecx, 9
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.004a0720

Function at 0x4a0c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a0ccc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x928890a499746597
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x288c8992
movabs rdx, 0x803040300050709
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x800070603050904
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4a0c65
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4a0c9c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4a0cbf
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 0xb
jb 0x4a0c4b
jmp 0x4a0cb3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456620
mov eax, edi
mov ecx, 0xb
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004a0c00
Function at 0x4a21c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a22da
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x4674cce9a8bf65f8
mov qword [rsp + 0x41], rdx
movabs rdx, 0x20666f2087c04c20
mov qword [rsp + 0x49], rdx
movabs rdx, 0x727272ee6ea9c620
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20659f953ca20861
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1404101a140b1802
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa141404101a140b
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb14020010131304
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1b02030405131419
mov qword [rsp + 0x31], rdx
movabs rdx, 0xb1307111907111c
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x4a2277
movzx r9d, byte [rsp + rsi + 0x41]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x41], dl
mov byte [rsp + rsi + 0x41], r8b
add rax, 2
cmp rax, 0x22
jge 0x4a22a9
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4a22cd
movzx r8d, byte [rsp + rdi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 0x1f
jb 0x4a225d
jmp 0x4a22c1
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x1f
call fcn.00444780
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00456620
mov eax, edi
mov ecx, 0x1f
call fcn.00456620
nop
call fcn.00454340
nop
jmp fcn.004a21c0

Function at 0x4a2820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a292c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4440d00f6c61654b
mov qword [rsp + 0x37], rdx
movabs rdx, 0xf86f2073e7194235
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xe4f86f2073e71942
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16b30ed6356cd0d4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x716060214040b00
mov qword [rsp + 0x19], rdx
movabs rdx, 0x11080f0800071506
mov qword [rsp + 0x21], rdx
movabs rdx, 0x615180517141108
mov qword [rsp + 0x27], rdx
movabs rdx, 0x180a141012080706
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4a28c8
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1e]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a28fc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4a291f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1e]
cmp rsi, 0x19
jb 0x4a28ae
jmp 0x4a2913
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456620
mov eax, edi
mov ecx, 0x19
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004a2820