joyce8/EMBER2024-capa huggingface dataset:
Function at 0x492e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x492f66
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0xc47463656c668c72
mov qword [rsp + 0x18], rdx
movabs rdx, 0xef53f232ee6c7956
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3520cbc663fbef53
mov qword [rsp + 0x26], rdx
movabs rdx, 0x64743ad365e2351c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7632075f70cbdff
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2006e5442bbbd66
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xf1b1c180a2c2517
mov qword [rsp + 0x46], rdx
movabs rdx, 0x13240f1b1c180a2c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x28092a250b181307
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0f1a2c29212a01
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2d202312101e2a2d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x92821151f092521
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1609250c2c232720
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x492f00
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x6c]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x6c]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x32
jge 0x492f2d
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2e
jae 0x492f54
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x2e
jb 0x492edf
jmp 0x492f48
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2e
call fcn.00441820
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2e
call fcn.00453360
mov eax, edi
mov ecx, 0x2e
nop dword [rax + rax]
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.00492e00

Function at 0x493280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493388
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x2e741ba335663e26
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4e2e3219d0242e2e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3ce0bf9bdc4d8b15
mov qword [rsp + 0x28], rdx
movabs rdx, 0x414001609120113
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10100b140410150a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5090b0301150a0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4080f1508040008
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x493320
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x24
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x493351
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x49337b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x24
add r8d, edx
cmp rsi, 0x17
jb 0x493305
jmp 0x49336f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453360
mov eax, edi
mov ecx, 0x17
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.00493280
Function at 0x493980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493ad2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x2e6d688549929475
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7f616e208a7a6574
mov qword [rsp + 0x23], rdx
movabs rdx, 0x707f616e208a7a65
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa29c7a6e6f200765
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7c7f6fb173758f68
mov qword [rsp + 0x34], rdx
movabs rdx, 0x7f6269615d657469
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x120204171d040401
mov qword [rsp + 0x44], rdx
movabs rdx, 0x260d0f1a1a1a021a
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1200008260d0f1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x180b270110261f0a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x24062020161d160b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x61e0a1028261205
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x493a6a
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffc1
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2c
jge 0x493a9b
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x493ac5
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffc1
add r8d, edx
cmp rsi, 0x29
jb 0x493a50
jmp 0x493ab6
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x29
call fcn.00441820
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x29
nop dword [rax]
call fcn.00453360
mov eax, edi
mov ecx, 0x29
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.00493980
Function at 0x493f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x494106
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x2e39969749496bc6
mov qword [rsp + 0x18], rdx
movabs rdx, 0xeeb8f65026ca7a9
mov qword [rsp + 0x20], rdx
movabs rdx, 0xdc0b0eeb8f65026c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x781e4b6e00db3dfd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8106e4f7d7b2a468
mov qword [rsp + 0x32], rdx
movabs rdx, 0x35155d3672657409
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x181f1f0620080e00
mov qword [rsp + 0x42], rdx
movabs rdx, 0x22113270827111d
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x917122014050221
mov qword [rsp + 0x50], rdx
movabs rdx, 0x271c1b2209081e02
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f210d2104280012
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1111270101290b10
mov qword [rsp + 0x68], rdx
movabs rdx, 0x27261c260f152822
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1f120011291f2127
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x494099
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x3e
jge 0x4940c8
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x4940f5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
nop
cmp rsi, 0x2a
jb 0x49407c
jmp 0x4940e9
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2a
call fcn.00441820
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00453360
mov eax, edi
mov ecx, 0x2a
nop dword [rax]
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.00493f80
Function at 0x4969a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x496ac6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x2074d9e0c2ebb673
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x94bb63112ddd6f05
mov qword [rsp + 0x24], rdx
movabs rdx, 0xdc4eefce94bb6311
mov qword [rsp + 0x28], rdx
movabs rdx, 0xece94369485f76fb
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1908031605170d10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5170c1b12160a11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1913080d0f040a12
mov qword [rsp + 0x48], rdx
movabs rdx, 0x51b080216011206
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a1a140e12051003
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x496a60
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x28
jge 0x496a8d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x496ab4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x496a43
jmp 0x496aa8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00441820
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453360
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004969a0
Function at 0x498780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4988d2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x6163ce665cccbbb7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7e6eb46fea706c6c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x877e6eb46fea706c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xaf516109e96ff0d2
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe542696f992d6e9c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x65596c32eb700a65
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x12030f15230a271f
mov qword [rsp + 0x46], rdx
movabs rdx, 0x417180d17151122
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1c240417180d1715
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20191f0401112403
mov qword [rsp + 0x58], rdx
movabs rdx, 0x51c141414200004
mov qword [rsp + 0x60], rdx
movabs rdx, 0x10030f02270b0325
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x49886d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2a
jge 0x49889a
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x4988c5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x29
jb 0x498850
jmp 0x4988b5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x29
call fcn.00441820
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x29
nop dword [rax]
call fcn.00453360
mov eax, edi
mov ecx, 0x29
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.00498780

Function at 0x498b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498c0b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd95f41eb2d46ee52
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x675adbd2e17320d7
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0c04080b060002
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0e05070d0c0408
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0200010b01070b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x498ba4
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x498bd7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x498bfe
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x498b87
jmp 0x498bf2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453360
mov eax, edi
mov ecx, 0x10
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.00498b20
Function at 0x49b9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ba92
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x9a6282747b33b47b
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x9c65849e
movabs rdx, 0x9000308070b0901
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30702050b000900
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49ba2b
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffdc
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x49ba5c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x49ba85
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffdc
add r8d, edx
cmp rsi, 0xc
jb 0x49ba11
jmp 0x49ba77
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453360
mov eax, edi
mov ecx, 0xc
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.0049b9c0

Function at 0x49baa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49bb7c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7463044d84659675
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x464f05209d047463
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0403010b09030b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3010b0105080b04
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x49bb15
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x49bb48
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49bb6f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x49baf8
jmp 0x49bb63
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453360
mov eax, edi
mov ecx, 0xe
call fcn.00453360
nop
nop dword [rax]
call fcn.00450d00
jmp fcn.0049baa0
Function at 0x49d860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d956
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x852b691a866f696d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e267a852b691a86
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7673696e7779746f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40400060e080e02
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x503071204040006
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe020900090d050f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49d8f3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x49d922
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49d949
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x49d8d6
nop
jmp 0x49d93d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453360
mov eax, edi
mov ecx, 0x13
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.0049d860

Function at 0x4a0f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a0ffc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe16320f06677f3ec
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd658d7e16320f066
mov qword [rsp + 0x22], rdx
movabs rdx, 0x300080409080a09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa010a0200070300
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a0f95
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4a0fc8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4a0fef
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4a0f78
jmp 0x4a0fe3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453360
mov eax, edi
mov ecx, 0xb
call fcn.00453360
nop
nop dword [rax]
call fcn.00450d00
jmp fcn.004a0f20
Function at 0x4a1d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a1e56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xd95eddd7de296512
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x22d95eddd7de2965
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6465122a20d6204c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3070b0e06090004
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0803050506090c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2030c03070d0006
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a1df3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4a1e22
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a1e49
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4a1dd6
nop
jmp 0x4a1e3d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453360
mov eax, edi
mov ecx, 0x11
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004a1d60
Function at 0x4a3e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3eeb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2064c58a619aa3e9
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x74a1c89e
movabs rdx, 0xa02090409050004
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x1080905
xor eax, eax
jmp 0x4a3e87
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4a3eb7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x4a3ede
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4a3e6a
jmp 0x4a3ed2
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.00453360
mov eax, edi
mov ecx, 0xc
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a3e20

Function at 0x4a4980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4a88
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x641331681bd4178e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8020641331681bd4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xff7c91ca20ca2e26
mov qword [rsp + 0x26], rdx
movabs rdx, 0x610051000051009
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20f0d0c0b0e0f0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x905020f0d0c0b0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1050b03110d0f0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a4a20
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x36
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4a4a51
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a4a7b
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x36
add r8d, edx
cmp rsi, 0x12
jb 0x4a4a05
jmp 0x4a4a6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00453360
mov eax, edi
mov ecx, 0x12
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a4980
Function at 0x4a5660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5768
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x1bc5ff656e146f63
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x22fd0d6572fd4e53
mov qword [rsp + 0x24], rdx
movabs rdx, 0x239eb9cd201d70e1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1206111508090e05
mov qword [rsp + 0x34], rdx
movabs rdx, 0x160f0902080d140f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x20d0215160f0902
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100f100a17120711
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a5702
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1c
jge 0x4a572f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a575b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4a56e5
jmp 0x4a574f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00441820
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00453360
mov eax, edi
mov ecx, 0x18
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a5660
Function at 0x4a5ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5cc8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x65635d7584636572
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x50786c6261685261
mov qword [rsp + 0x25], rdx
movabs rdx, 0x7f50786c62616852
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3851126e54765d20
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3150a0e03101004
mov qword [rsp + 0x36], rdx
movabs rdx, 0x101403150a0e0310
mov qword [rsp + 0x38], rdx
movabs rdx, 0x204160f0f051009
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90c0f08180e0409
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe17100504051205
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a5c60
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffe5
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4a5c91
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4a5cbb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffe5
add r8d, edx
cmp rsi, 0x19
jb 0x4a5c43
jmp 0x4a5caf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00453360
mov eax, edi
mov ecx, 0x19
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a5ba0
Function at 0x4a7200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a72d2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x723329612ac034e8
mov qword [rsp + 0x19], rdx
movabs rdx, 0x73e7ee723329612a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x601060908050201
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060300
xor eax, eax
jmp 0x4a726b
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x2d
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4a729c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4a72c5
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x2d
add r8d, edx
cmp rsi, 0xb
jb 0x4a7251
jmp 0x4a72b7
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00453360
mov eax, edi
mov ecx, 0xb
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a7200