joyce8/EMBER2024-capa huggingface dataset:
Function at 0x486d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486e28
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x3036364b82808d35
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x82f9bb36dd33ac39
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8bdc3698257732ce
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4170f1616130e0b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe1203170b011014
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd130e1203170b01
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf14031414090213
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x486dc0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x486df2
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x486e1b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 0x18
jb 0x486da5
jmp 0x486e0f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x18
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00486d20

Function at 0x487160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487272
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x353173316654595e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x354d3648333c3232
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4131354d3648333c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4e3242303e50366b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x51412190015010a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x301030a050e0c19
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa1114110301030a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc02121717150501
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x487211
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x48723e
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x487265
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4871f4
jmp 0x487259
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00487160
Function at 0x487280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4873a6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x4a4835a44a556e37
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc271833787525e49
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7a57c27183378752
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5c5d315f6eba335d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x14080e0b08040d0c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x16090e1114080e0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x190c01070f0c0603
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0a07020b151119
mov qword [rsp + 0x48], rdx
movabs rdx, 0x181112100f140811
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x487340
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x24
jge 0x48736d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x487394
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x487323
jmp 0x487388
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00487280

Function at 0x4884c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4885f2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xfb0b34f00b00fb21
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x310dfb053230dd38
mov qword [rsp + 0x23], rdx
movabs rdx, 0x3938360308383431
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3d32db2a9907e9d2
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe13091e1e1e070d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x121e1717171a0917
mov qword [rsp + 0x42], rdx
movabs rdx, 0x11c03091a18121e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170e01191a030602
mov qword [rsp + 0x50], rdx
movabs rdx, 0x61c0c0e040e0019
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe1b0e010b130006
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48858f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x2e
jge 0x4885bc
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4885e5
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1f
jb 0x488572
jmp 0x4885d7
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.0044a200
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x1f
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1f
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004884c0
Function at 0x494d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x494e48
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x46ef2f744661d165
mov qword [rsp + 0x19], rdx
movabs rdx, 0xaffbbd46ef2f7446
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7c0aca0520403302
mov qword [rsp + 0x24], rdx
movabs rdx, 0xcc68d0d17f662f65
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xbdb73e20c7b27246
mov qword [rsp + 0x34], rdx
movabs rdx, 0x110b180112152216
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1d151a011714050d
mov qword [rsp + 0x44], rdx
movabs rdx, 0x171009051d151a01
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120b151b0d0f2100
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1502060b1e1b0a11
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d0508020b1e0d12
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x494de0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x494e12
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x494e3b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0x23
jb 0x494dc2
jmp 0x494e2f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x23
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x23
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x23
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00494d00

Function at 0x495780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49585c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x376665343332e46a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6668be8ec893be38
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90e0b0d05000601
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0d0d060a0e0d0c
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4957f2
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x495828
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x49584f
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
nop dword [rax]
cmp rsi, 0x10
jb 0x4957d8
jmp 0x495843
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00495780
Function at 0x495b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x495cb2
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x3a766efb6b6a3542
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x52611565266c695b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd72e79381c700453
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x721046e67461586c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x741a5642172f1051
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x656d57bb74397c5f
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd04212c22161c04
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1210d04212c2216
mov qword [rsp + 0x50], rdx
movabs rdx, 0x192a281e230b200f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x152e132413172500
mov qword [rsp + 0x60], rdx
movabs rdx, 0x26082404111c2410
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2d22161419130117
mov qword [rsp + 0x70], rdx
movabs rdx, 0xb11291424022503
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x495c4a
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x32
jge 0x495c77
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x495ca5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x30
jb 0x495c2d
jmp 0x495c98
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x30
call fcn.0044a200
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x30
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x30
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00495b40

Function at 0x496a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x496ae8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6e2cf69c736ef8f4
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x74
movabs rdx, 0x1060201040604
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6050006
xor eax, eax
jmp 0x496a81
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x496ab3
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x496adb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 9
jb 0x496a67
jmp 0x496acf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00496a20
Function at 0x49ba60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49bb2b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf2786f26aba3a923
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x3832
movabs rdx, 0x705030104010400
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5020002
xor eax, eax
jmp 0x49bac6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x49baf7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x49bb1e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x49baa9
jmp 0x49bb12
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0049ba60

Function at 0x4a2b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2bc8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xce61cb18dad06e49
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x9d
movabs rdx, 0x403050205080408
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2020307
xor eax, eax
jmp 0x4a2b61
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x75]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x4a2b93
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a2bbb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x75]
cmp rsi, 9
jb 0x4a2b47
jmp 0x4a2baf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a2b00
Function at 0x4a2be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2cf6
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x73bf776f000c7f10
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6121a28320252041
mov qword [rsp + 0x20], rdx
movabs rdx, 0xae6d6121a2832025
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7709091ed320cc74
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x701140c150c0919
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1613030a010e0715
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x180200090d001613
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170e150600160011
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a2c8e
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a2cc2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a2ce9
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x1a
jb 0x4a2c74
nop
jmp 0x4a2cdd
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004a2be0
Function at 0x4a62c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6388
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xcd748c576c668a72
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x2f
movabs rdx, 0x508050707080105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x804
xor eax, eax
jmp 0x4a6323
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4a6350
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a637b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4a6306
jmp 0x4a636f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a62c0

Function at 0x4a6700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a67cb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2133637671697766
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x6d
movabs rdx, 0x106080606070308
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x40200
xor eax, eax
jmp 0x4a6764
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4a6797
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x4a67be
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4a6747
jmp 0x4a67b2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a6700
Function at 0x4a7000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a70e8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5b74f12522404e01
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2e5575f561565b74
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa010c0005050307
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10101070a010c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x204050c040c0405
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a7081
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4a70b3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a70db
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0xe
jb 0x4a7067
jmp 0x4a70cf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a7000

Function at 0x4a7c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7cc8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7341722e3c4c7508
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x46
movabs rdx, 0x606030606040606
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x80203
xor eax, eax
jmp 0x4a7c61
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x4a7c93
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a7cbb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 9
jb 0x4a7c47
jmp 0x4a7caf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a7c00
Function at 0x4a8400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8532
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x4a4c09656ca61712
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3b484a4c09656ca6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x642b242030025815
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6f20f11f9f207803
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7364e8752662be2e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1b15020f0a0b161a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x170110150a1b1b15
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf1d1b180c0f0105
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1208170f1f060d0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x700090a1b060110
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a84cf
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x53]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x53]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x26
jge 0x4a84fc
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x4a8525
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x22
jb 0x4a84b2
jmp 0x4a8517
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x22
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x22
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x22
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a8400

Function at 0x4a8b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8bcb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7405a16f4374f06f
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9338fda4
movabs rdx, 0x9060b010a050b08
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x80a0106
xor eax, eax
jmp 0x4a8b67
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4a8b97
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x4a8bbe
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4a8b4a
jmp 0x4a8bb2
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a8b00
Function at 0x4a9d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9ed2
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0xded3632af3d01e6d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4655e5d820ded363
mov qword [rsp + 0x24], rdx
movabs rdx, 0x34666fc96444a512
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x75713cf62d0808c8
mov qword [rsp + 0x34], rdx
movabs rdx, 0xdc002e4fdd2090c0
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b23062121140403
mov qword [rsp + 0x44], rdx
movabs rdx, 0x220f030b1b230621
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40b011d1e071622
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3240d150d0d1422
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a090a241b112000
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1e112319020f020a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x91d0e1e1720240e
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4a9e6d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x34
jge 0x4a9e9a
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4a9ec5
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x25
jb 0x4a9e50
jmp 0x4a9eb5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
call fcn.0044a200
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x25
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x25
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a9d80