joyce8/EMBER2024-capa huggingface dataset:
Function at 0x48f8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f9ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7da26e779290c63d
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x65aa697d
movabs rdx, 0x903020106000109
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4070903000903
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x48f945
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x48f97c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x48f99f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0xb
jb 0x48f92b
jmp 0x48f993
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451e00
mov eax, edi
mov ecx, 0xb
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.0048f8e0

Function at 0x48f9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fa8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xde0f8f6d724e6c94
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x9ec89ade
movabs rdx, 0x205070907060907
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x700080a07090205
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x48fa25
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x48fa5c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x48fa7f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0xb
jb 0x48fa0b
jmp 0x48fa73
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451e00
mov eax, edi
mov ecx, 0xb
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.0048f9c0
Function at 0x491000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4910ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20efcac6ed6464df
mov qword [rsp + 0x32], rdx
movabs rdx, 0x221372a2a920ef
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65b9b0df6e6920c7
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60b0009030d1304
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x13060c140d0b0908
mov qword [rsp + 0x22], rdx
movabs rdx, 0x120e030e14050603
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x49108d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jge 0x4910ba
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4910dd
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x491070
jmp 0x4910d1
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451e00
mov eax, edi
mov ecx, 0x16
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.00491000

Function at 0x491100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x491208
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6120746fea6e6163
mov qword [rsp + 0x39], rdx
movabs rdx, 0xbd057ddf676973a5
mov qword [rsp + 0x41], rdx
movabs rdx, 0xc59274737105d1bd
mov qword [rsp + 0x48], rdx
movabs rdx, 0xfc73eaf18ba5c1b6
mov qword [rsp + 0x50], rdx
movabs rdx, 0x30d151c190c181e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x191003080f11181a
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe1616080d12191e
mov qword [rsp + 0x29], rdx
movabs rdx, 0x150f1a16171e1b16
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4911ab
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
cmp rax, 0x20
jge 0x4911d8
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4911fb
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x1f
jb 0x49118e
jmp 0x4911ef
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x1f
call fcn.004415e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00451e00
mov eax, edi
mov ecx, 0x1f
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.00491100
Function at 0x492660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49275d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6571bcd82fd4d91a
mov qword [rsp + 0x35], rdx
movabs rdx, 0xc218206571bcd82f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xdd0f74131472cf32
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40f060b11010502
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa0b06000a060e02
mov qword [rsp + 0x23], rdx
movabs rdx, 0x3120a0b06000a06
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb0f090a0c090511
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x492700
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x49272d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x492750
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4926df
jmp 0x492744
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451e00
mov eax, edi
mov ecx, 0x13
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.00492660

Function at 0x494240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49433d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x740879bdbdb9c862
mov qword [rsp + 0x34], rdx
movabs rdx, 0x64996637740879bd
mov qword [rsp + 0x38], rdx
movabs rdx, 0x23616d1a6f661b65
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60608100d040a04
mov qword [rsp + 0x18], rdx
movabs rdx, 0x50d06020b050d05
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd020a03050d0602
mov qword [rsp + 0x24], rdx
movabs rdx, 0x501051308041004
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4942e0
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x49430d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x494330
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4942bf
jmp 0x494324
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451e00
mov eax, edi
mov ecx, 0x14
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.00494240
Function at 0x494660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49474a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x366c106863206fc3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x702d366c10686320
mov qword [rsp + 0x30], rdx
movabs rdx, 0x495073e065593afc
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0a050700070e10
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0a0a0a05070007
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1007050508100c11
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4946ed
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x49471a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49473d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4946d0
jmp 0x494731
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.004415e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451e00
mov eax, edi
mov ecx, 0x12
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.00494660

Function at 0x4951e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4952fd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x73deb0db88d76f83
mov qword [rsp + 0x45], rdx
movabs rdx, 0xe465abd66f698bd1
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x938798e465abd66f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x919191731a895205
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc071a03160d100f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x609001510160c07
mov qword [rsp + 0x25], rdx
movabs rdx, 0x712111802130713
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x413160c19080809
mov qword [rsp + 0x35], rdx
movabs rdx, 0x141309151205150d
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x4952a0
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4952cd
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4952f0
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
cmp rsi, 0x1b
jb 0x49527d
jmp 0x4952e4
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x1b
call fcn.004415e0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00451e00
mov eax, edi
mov ecx, 0x1b
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004951e0
Function at 0x499d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499e9a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2005613e36795646
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x64244633651e3b37
mov qword [rsp + 0x45], rdx
movabs rdx, 0x120366424463365
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3b29cae225507320
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10817011a0d1a03
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x312010817011a0d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x15040c0e0c11180a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x116160a101909
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x90c181606160908
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x499e37
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x22
jge 0x499e69
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x499e8d
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x1b
jb 0x499e1d
jmp 0x499e81
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.004415e0
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00451e00
mov eax, edi
mov ecx, 0x1b
call fcn.00451e00
nop
call fcn.0044fb80
nop
jmp fcn.00499d80

Function at 0x49a1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a26c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20e63ccf09763f6c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x644629e9616820e6
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0301050b03010a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa010c01060b0403
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x49a20f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x49a23c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49a25f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x49a1f2
jmp 0x49a253
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451e00
mov eax, edi
mov ecx, 0xe
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.0049a1a0
Function at 0x49ccc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cd9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf783f86673d5656d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x446e535216ea6f07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80b04020c0d080f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc0d07080b0f080b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20f060f0a050a0c
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x49cd40
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x49cd6d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x49cd90
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x49cd22
jmp 0x49cd84
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.004415e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451e00
mov eax, edi
mov ecx, 0x10
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.0049ccc0

Function at 0x49de80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49dfa7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xe007201bc74656e
mov qword [rsp + 0x45], rdx
movabs rdx, 0x6f72c30e007201bc
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8a818ffcd277070
mov qword [rsp + 0x50], rdx
movabs rdx, 0x206e6f697489652b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x77152a8d72346e6f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x101f11211f11100d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x31515031e20101f
mov qword [rsp + 0x25], rdx
movabs rdx, 0x22131d200d030e20
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1d08130710040e03
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1f120f0804040d06
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x49df49
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
cmp rax, 0x26
jge 0x49df77
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x23
jae 0x49df9a
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
cmp rsi, 0x23
jb 0x49df2c
jmp 0x49df8e
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x23
call fcn.004415e0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00451e00
mov eax, edi
mov ecx, 0x23
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.0049de80
Function at 0x4a2ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2ddb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc8cdc78d3672ecdf
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6e2e41c8cdc78d36
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb02570928a207437
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10b110808040f09
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb01070e00081106
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7040b01070e0008
mov qword [rsp + 0x25], rdx
movabs rdx, 0x120f010503040301
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a2d79
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a2dab
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a2dce
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0x13
jb 0x4a2d5f
jmp 0x4a2dc2
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451e00
mov eax, edi
mov ecx, 0x13
call fcn.00451e00
nop
nop dword [rax + rax]
call fcn.0044fb80
jmp fcn.004a2ce0

Function at 0x4a8940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8a78
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x74e5116dd13e6f74
mov qword [rsp + 0x46], rdx
movabs rdx, 0xf8cf74e5116dd13e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6953165c395ec65
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6f6e2a03978d190d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x650ca8d7b0f75b74
mov qword [rsp + 0x60], rdx
movabs rdx, 0x171715050613081b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1f0f16200f0d2007
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1e0d1e201f0f1620
mov qword [rsp + 0x26], rdx
movabs rdx, 0x81402111d121d03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc080f0b0b100c11
mov qword [rsp + 0x36], rdx
movabs rdx, 0x51e091c12111208
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4a8a15
movzx r9d, byte [rsp + rsi + 0x46]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x46], dl
mov byte [rsp + rsi + 0x46], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4a8a48
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x4a8a6b
movzx r8d, byte [rsp + rdi + 0x46]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
nop
cmp rsi, 0x22
jb 0x4a89fb
jmp 0x4a8a5f
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.004415e0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00451e00
mov eax, edi
mov ecx, 0x22
call fcn.00451e00
nop
call fcn.0044fb80
nop dword [rax]
jmp fcn.004a8940
Function at 0x4a8ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8c9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4d753b47564c4421
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20063d653d5720f6
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1e4d436e613d510f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4170e0008051005
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20515040a16120e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd021503010b0700
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1701020a0a11070e
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a8c40
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4a8c6d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a8c90
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x4a8c1f
jmp 0x4a8c84
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451e00
mov eax, edi
mov ecx, 0x18
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004a8ba0

Function at 0x4ab1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab28c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc0d04d70f468f0ec
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xcce9df2e
movabs rdx, 0x7090103050b000a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb060906050b0605
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4ab225
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ab25c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4ab27f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
cmp rsi, 0xc
jb 0x4ab20b
jmp 0x4ab273
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451e00
mov eax, edi
mov ecx, 0xc
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004ab1c0
Function at 0x4abde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abe9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa6daab1c6c6465a9
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xab
movabs rdx, 0x607070400080105
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x706
xor eax, eax
nop
jmp 0x4abe40
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4abe6d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4abe90
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4abe22
jmp 0x4abe84
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.004415e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451e00
mov eax, edi
mov ecx, 9
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004abde0

Function at 0x4ac380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac47d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe974e9dbc6feef04
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf8f66f54fcf5e974
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7fd569e66785f7fb
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1504141407030e00
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd020509120e0910
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe01080d020509
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf040c1200000e0e
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4ac420
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4ac44d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ac470
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4ac3ff
jmp 0x4ac464
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451e00
mov eax, edi
mov ecx, 0x16
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004ac380
Function at 0x4aef60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af03d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4172127551675652
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6348651809ef0913
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90508090a0a0c0b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x70f01090a0e090c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf0e0e08050f0b0f
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4aefe0
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4af00d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4af030
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4aefc2
jmp 0x4af024
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.004415e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451e00
mov eax, edi
mov ecx, 0x10
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004aef60

Function at 0x4b0160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b027a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x65ab7246ab89c493
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x636995c174a1657f
mov qword [rsp + 0x46], rdx
movabs rdx, 0x74cd636995c174a1
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb7b465746e53d3a9
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6130c0a12121010
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc06130c0a1212
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6030a180d021918
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1001180610010814
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1913120e0a190103
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4b0217
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4b0249
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4b026d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0x1a
jb 0x4b01fd
jmp 0x4b0261
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.004415e0
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451e00
mov eax, edi
mov ecx, 0x1a
call fcn.00451e00
nop
call fcn.0044fb80
nop
jmp fcn.004b0160