joyce8/EMBER2024-capa huggingface dataset:
Function at 0x497680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x497746
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x106070108020400
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x100
movabs rdx, 0x30263fe6ce70334
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x2d
xor eax, eax
nop
jmp 0x4976e0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x497712
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x497737
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 9
jb 0x4976c2
jmp 0x49772b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00497680

Function at 0x497be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x497c9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x507010700030807
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x6080608
movabs rdx, 0x8512fa652f66e529
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xee
xor eax, eax
nop
jmp 0x497c40
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x497c6d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x497c90
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x497c22
jmp 0x497c84
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00497be0

Function at 0x499720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4997ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x80a00050a040303
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1040a000508080a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x7261a7a136742ce5
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xe073ed72
xor eax, eax
jmp 0x499785
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4997bc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4997df
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0xb
jb 0x49976b
jmp 0x4997d3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00499720
Function at 0x499800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4998bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x80700060407
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x507
movabs rdx, 0x28fc41c6636e7533
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x17
xor eax, eax
nop
jmp 0x499860
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x49988d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4998b0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x499842
jmp 0x4998a4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00499800

Function at 0x49b640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b70c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x50c060b00080802
mov qword [rsp + 0x19], rdx
movabs rdx, 0x304080b0b090003
mov qword [rsp + 0x21], rdx
movabs rdx, 0x643de9f0ac29694f
mov qword [rsp + 0x29], rdx
movabs rdx, 0x3e65e0df6105dd64
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49b6af
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x49b6dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49b6ff
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x49b692
jmp 0x49b6f3
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049b640
Function at 0x49c560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x49c6bd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x261c0e1b10092720
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x41d071e05251e1c
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc022323080b010e
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x121516030b00270e
mov qword [rsp + 0x37], rdx
movabs rdx, 0x1b0a0b1b180e020d
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xe21111e0a09171e
mov qword [rsp + 0x47], rdx
movabs rdx, 0x1c101a0a12251e10
mov qword [rsp + 0x4f], rdx
movabs rdx, 0xbd72f91cd2c5d126
mov qword [rsp + 0x57], rdx
movabs rdx, 0x6cc320b8e42dc089
mov qword [rsp + 0x5f], rdx
movabs rdx, 0x706cc320b8e42dc0
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd3fbf16f2014b1
mov qword [rsp + 0x68], rdx
movabs rdx, 0x7b64ba1c359b3d68
mov qword [rsp + 0x70], rdx
movabs rdx, 0x72a8201072fa743f
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x49c660
movzx r9d, byte [rsp + rsi + 0x57]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x57], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x57], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x38
jge 0x49c68d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x49c6b0
movzx r8d, byte [rsp + rdi + 0x57]
sub r8d, edx
cmp rsi, 0x29
jb 0x49c63e
jmp 0x49c6a4
xor eax, eax
lea rbx, [rsp + 0x57]
mov ecx, 0x29
call fcn.0044d280
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00462ca0
mov eax, edi
mov ecx, 0x29
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.0049c560
Function at 0x49c6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c82c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x130e0b131126110f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x31a27150c20130e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x210191b16060d19
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5031e1f0e0d0500
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe1026271b1e1e02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1e1c1413191c0d07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x271c0e14150d2505
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd059467464f66134
mov qword [rsp + 0x50], rdx
movabs rdx, 0xdb08de49f479654b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x786638521820622a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x43196548311b2268
mov qword [rsp + 0x68], rdx
movabs rdx, 0x53f2b6172657443
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x49c7c4
movzx r9d, byte [rsp + rsi + 0x50]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x14]
mov byte [rsp + rdi + 0x50], dl
mov byte [rsp + rsi + 0x50], r8b
add rax, 2
cmp rax, 0x36
jge 0x49c7fc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x28
jae 0x49c81f
movzx r8d, byte [rsp + rdi + 0x50]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x14]
cmp rsi, 0x28
jb 0x49c7aa
jmp 0x49c813
xor eax, eax
lea rbx, [rsp + 0x50]
mov ecx, 0x28
call fcn.0044d280
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00462ca0
mov eax, edi
mov ecx, 0x28
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049c6e0

Function at 0x49ce60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cf68
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa080d01160d1405
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x10051801050819
mov qword [rsp + 0x22], rdx
movabs rdx, 0x190b080800100518
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1012111116060904
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2ef4deea6c66a678
mov qword [rsp + 0x36], rdx
movabs rdx, 0x61438765f1f2eedc
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc9f861438765f1f2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4ff46167725474f2
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x49cf0b
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1c
jge 0x49cf38
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x49cf5b
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x1a
jb 0x49ceee
jmp 0x49cf4f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049ce60
Function at 0x49cf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d0b8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x1c180a1114090f06
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1300030218111d11
mov qword [rsp + 0x27], rdx
movabs rdx, 0x90d040e151a1609
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x4171107201a090e
mov qword [rsp + 0x37], rdx
movabs rdx, 0x70a0c0e15090012
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x91c1e1a15160f08
mov qword [rsp + 0x47], rdx
movabs rdx, 0xb5966399929865b8
mov qword [rsp + 0x4f], rdx
movabs rdx, 0xb7b5966399929865
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6e9c011d6572d25e
mov qword [rsp + 0x58], rdx
movabs rdx, 0xecb5001847f6c3ca
mov qword [rsp + 0x60], rdx
movabs rdx, 0x3067b5857020716f
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x49d058
movzx r9d, byte [rsp + rsi + 0x4f]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x4f], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x4f], dl
add rax, 2
cmp rax, 0x30
jge 0x49d088
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x49d0ab
movzx r8d, byte [rsp + rdi + 0x4f]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x49d03b
jmp 0x49d09f
xor eax, eax
lea rbx, [rsp + 0x4f]
mov ecx, 0x21
call fcn.0044d280
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00462ca0
mov eax, edi
mov ecx, 0x21
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.0049cf80

Function at 0x49d860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d926
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x104050507020608
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x6010802
movabs rdx, 0xa970548420889269
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x55
xor eax, eax
nop
jmp 0x49d8c0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x49d8f2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x49d917
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 9
jb 0x49d8a2
jmp 0x49d90b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049d860
Function at 0x49df20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e01b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20a010f08001102
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x120a0d030b0011
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa0900120a0d030b
mov qword [rsp + 0x25], rdx
movabs rdx, 0x50d010c0b100411
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x2e74d000a7721e0e
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1a1b612e74d000a7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x141708b449bf041c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49dfb9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x49dfeb
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49e00e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x13
jb 0x49df9f
jmp 0x49e002
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.0049df20

Function at 0x49e7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e88a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x60e0c0d0d02040f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x40a0e11090d060e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x803010f0202040b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2e42632e44195b72
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x95a2e42632e4419
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3d652f512510514a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49e82d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x49e85a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49e87d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x49e810
jmp 0x49e871
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049e7a0
Function at 0x49f2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f3aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x205040f05080f02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x60e0e0a050b1207
mov qword [rsp + 0x25], rdx
movabs rdx, 0x9040a0b11100704
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1be3f0136cfe6572
mov qword [rsp + 0x35], rdx
movabs rdx, 0xb013981be3f0136c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x551203dfb02e6506
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49f34d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x75]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jge 0x49f37a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49f39d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x49f330
jmp 0x49f391
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0049f2c0

Function at 0x4a46e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a47cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x80f030b060f0004
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4040a0a0c09050e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x6070b0b0906100e
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1cdbc029e76c699c
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1fd8231cdbc029e7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x737411c315658020
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a476a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a479c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a47bf
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0x13
jb 0x4a4750
jmp 0x4a47b3
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a46e0
Function at 0x4aee40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aef2a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1209000e0a120f09
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa140d1206081209
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc00121203110101
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x660b64200f650d07
mov qword [rsp + 0x33], rdx
movabs rdx, 0x2164c1f907660b64
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b208e206e676abf
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4aeecd
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jge 0x4aeefa
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4aef1d
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4aeeb0
jmp 0x4aef11
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004aee40

Function at 0x4b0280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b036c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20e0806050e0401
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x608020e0806050e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x102070f0708060c
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd2a3ad566dd5e270
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x4d2a3ad566dd5e2
mov qword [rsp + 0x30], rdx
movabs rdx, 0x64d1e46edd64206e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b030a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x4b033c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b035f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x11
jb 0x4b02f0
jmp 0x4b0353
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b0280
Function at 0x4b18c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b197e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8000007040a05
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x3070506
movabs rdx, 0xdfdde10dee64614d
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x6767dddf
xor eax, eax
jmp 0x4b1921
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4b194e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b1971
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b1904
jmp 0x4b1965
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
nop
call fcn.004609c0
jmp fcn.004b18c0

Function at 0x4b1cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1d87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20a090207040503
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5050b0806020a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8ca48240c8966e95
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xc89fc295
xor eax, eax
jmp 0x4b1d28
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x4b1d57
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4b1d7a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4b1d0b
jmp 0x4b1d6e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b1cc0
Function at 0x4b2340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2448
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1601130d150e180e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf010e05020c0d0a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x40f01020c030710
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x4070e0f1902050e
mov qword [rsp + 0x35], rdx
movabs rdx, 0x796c591863616c63
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x66616e51625e756e
mov qword [rsp + 0x45], rdx
movabs rdx, 0x20747066616e5162
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65730d610f576658
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b23eb
movzx r9d, byte [rsp + rsi + 0x3d]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x3d], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x3d], dl
add rax, 2
cmp rax, 0x20
jge 0x4b2418
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4b243b
movzx r8d, byte [rsp + rdi + 0x3d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4b23ce
jmp 0x4b242f
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1b
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b2340

Function at 0x4b4020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b40de
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x503020208080903
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0xa070907
movabs rdx, 0xbd646061469c6162
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xbde29bbd
xor eax, eax
jmp 0x4b4081
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4b40ae
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b40d1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b4064
jmp 0x4b40c5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
nop
call fcn.004609c0
jmp fcn.004b4020