joyce8/EMBER2024-capa huggingface dataset:
Function at 0x483460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48354a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74dbe0e25f646cec
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x4e74dbe0e25f646c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6e52cc623572f861
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5060c08040e0906
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa060f0c05060c08
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc0a0806000006
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4834ed
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x48351a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48353d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4834d0
jmp 0x483531
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045cd80
mov eax, edi
mov ecx, 0x11
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00483460

Function at 0x4850a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48515d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x325d306164446168
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x65
movabs rdx, 0x506070705020502
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x2010007
xor eax, eax
nop
jmp 0x485100
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x48512d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x485150
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4850e2
jmp 0x485144
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045cd80
mov eax, edi
mov ecx, 9
call fcn.0045cd80
nop
nop dword [rax]
call fcn.0045aaa0
jmp fcn.004850a0

Function at 0x4853c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485472
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x5d694f61625f6a54
mov qword [rsp + 0x20], rdx
movabs rdx, 0x202010607070605
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x48540e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x485442
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x485465
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 8
jb 0x4853f4
nop
jmp 0x485459
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00449780
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045cd80
mov eax, edi
mov ecx, 8
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004853c0
Function at 0x4869a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486a86
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x65483f494034695a
mov qword [rsp + 0x31], rdx
movabs rdx, 0x806948332f5f3365
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10a080c02080c0e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3000c0e0a010a
mov qword [rsp + 0x21], rdx
movabs rdx, 0x50b01000b020500
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x486a20
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x486a52
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x486a77
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0xf
jb 0x486a02
jmp 0x486a6b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045cd80
mov eax, edi
mov ecx, 0xf
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004869a0

Function at 0x48a4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a5ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5f06947e90929b99
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6968575f06947e90
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc61a9b7090a5aa9b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x306120b03110205
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60003030e040306
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc0b0d01100c03
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x48a56d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x48a59a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x48a5bd
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x48a550
jmp 0x48a5b1
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00449780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045cd80
mov eax, edi
mov ecx, 0x13
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0048a4e0
Function at 0x48c200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c2c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1953d265971e1330
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x24161d19
movabs rdx, 0x100030a070509
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x1020908
xor eax, eax
jmp 0x48c260
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x48c292
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x48c2b7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 0xb
jb 0x48c244
jmp 0x48c2ab
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045cd80
mov eax, edi
mov ecx, 0xb
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0048c200
Function at 0x498da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498eac
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20f3e14649adf375
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc34ade9a2049d641
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd960c34ade9a2049
mov qword [rsp + 0x40], rdx
movabs rdx, 0x64d05ddd20e5e0de
mov qword [rsp + 0x48], rdx
movabs rdx, 0x417050f01060d10
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe0d0c0516030414
mov qword [rsp + 0x22], rdx
movabs rdx, 0x170c05120e0d0c05
mov qword [rsp + 0x26], rdx
movabs rdx, 0x11180209120d1316
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x498e48
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1c
jge 0x498e7c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x498e9f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x72]
cmp rsi, 0x1a
jb 0x498e2e
jmp 0x498e93
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1a
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00498da0

Function at 0x49a800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a90c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa705c404f1a475c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x293c372a204b6520
mov qword [rsp + 0x48], rdx
movabs rdx, 0x745d712c53252047
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf05030c08161215
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x150703070f05030c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10030d0705141603
mov qword [rsp + 0x28], rdx
movabs rdx, 0x160e020d1301000c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x715040e0d140a05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49a8a8
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x24
jge 0x49a8dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x49a8ff
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x18
jb 0x49a88e
jmp 0x49a8f3
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00449780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045cd80
mov eax, edi
mov ecx, 0x18
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0049a800
Function at 0x49c5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c6dd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x860101bb78876ef5
mov qword [rsp + 0x33], rdx
movabs rdx, 0xf6bef6465860101
mov qword [rsp + 0x38], rdx
movabs rdx, 0x97787568e7edfd6c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0a121110140a13
mov qword [rsp + 0x19], rdx
movabs rdx, 0x110c040e0f020612
mov qword [rsp + 0x21], rdx
movabs rdx, 0x400110c040e0f02
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa0f00050f0e0f07
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x49c680
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x49c6ad
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x49c6d0
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x49c65f
jmp 0x49c6c4
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00449780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045cd80
mov eax, edi
mov ecx, 0x15
call fcn.0045cd80
nop
nop dword [rax]
call fcn.0045aaa0
jmp fcn.0049c5e0

Function at 0x49daa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49db9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdf446e5f3f66f020
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x32b418f0f0df446e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40261547656d1346
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0a110d08110b01
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd010c0c120c0407
mov qword [rsp + 0x25], rdx
movabs rdx, 0x60a0d130e040d01
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x130b060409031414
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x49db39
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x49db6b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x49db8e
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 0x15
jb 0x49db1f
jmp 0x49db82
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045cd80
mov eax, edi
mov ecx, 0x15
call fcn.0045cd80
nop
nop dword [rax + rax]
call fcn.0045aaa0
jmp fcn.0049daa0
Function at 0x4a05c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a06e7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xcd59e865d0eff072
mov qword [rsp + 0x46], rdx
movabs rdx, 0x4620cd59e865d0ef
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf46ec9b54b7947d3
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3420a7dbfb8fda49
mov qword [rsp + 0x58], rdx
movabs rdx, 0x64f46e6c80502066
mov qword [rsp + 0x60], rdx
movabs rdx, 0x140e0712190f2115
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x17070a1c0221141d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1d01030b13192011
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0c021e16150d0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x130a05030605020f
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4a0689
movzx r9d, byte [rsp + rsi + 0x46]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x46], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x46], dl
add rax, 2
cmp rax, 0x28
jge 0x4a06b7
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x22
jae 0x4a06da
movzx r8d, byte [rsp + rdi + 0x46]
sub r8d, edx
cmp rsi, 0x22
jb 0x4a066c
jmp 0x4a06ce
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.00449780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.0045cd80
mov eax, edi
mov ecx, 0x22
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004a05c0

Function at 0x4a0700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a0827
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x3a7491e36ce80a72
mov qword [rsp + 0x46], rdx
movabs rdx, 0xc203a7491e36ce8
mov qword [rsp + 0x48], rdx
movabs rdx, 0x209908859768c50a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1672ebf1fd6ebc6e
mov qword [rsp + 0x58], rdx
movabs rdx, 0xba57a797988f09e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x13211019100c1916
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x161f1c1b1c17041b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x150b1a1c051d0e0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1d0f0d160205011b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100a170c091f1f20
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4a07c9
movzx r9d, byte [rsp + rsi + 0x46]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x46], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x46], dl
add rax, 2
cmp rax, 0x28
jge 0x4a07f7
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x22
jae 0x4a081a
movzx r8d, byte [rsp + rdi + 0x46]
sub r8d, edx
cmp rsi, 0x22
jb 0x4a07ac
jmp 0x4a080e
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.00449780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.0045cd80
mov eax, edi
mov ecx, 0x22
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004a0700
Function at 0x4a1060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a117a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xcb7470f07bee65da
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xc6f60065fdd361e5
mov qword [rsp + 0x45], rdx
movabs rdx, 0x66ec64c6f60065fd
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7265740a13e3eec4
mov qword [rsp + 0x50], rdx
movabs rdx, 0x110f17100b05030d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe0e110f17100b05
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x205051108170b14
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1100130e14070204
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xd0a13150a160407
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x4a1117
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x22
jge 0x4a1149
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4a116d
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0x1b
jb 0x4a10fd
jmp 0x4a1161
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.00449780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1b
call fcn.0045cd80
nop
call fcn.0045aaa0
nop
jmp fcn.004a1060

Function at 0x4a17a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4a1907
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x33749e876c6c8668
mov qword [rsp + 0x53], rdx
movabs rdx, 0xda6ec557bfdf69a1
mov qword [rsp + 0x5b], rdx
movabs rdx, 0xf8f065c4fcda6ec5
mov qword [rsp + 0x60], rdx
movabs rdx, 0x61efa8d282adf481
mov qword [rsp + 0x68], rdx
movabs rdx, 0x68d165cf729aea88
mov qword [rsp + 0x70], rdx
movabs rdx, 0x78d92e6e69202f6f
mov qword [rsp + 0x78], rdx
movabs rdx, 0xb0b15202a0100
mov qword [rsp + 0x19], rdx
movabs rdx, 0x71900161b1d1307
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc07071900161b1d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x40c1d181f0d1308
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xa171f0518261a00
mov qword [rsp + 0x33], rdx
movabs rdx, 0x16231415211a1a10
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x18021d081e17152b
mov qword [rsp + 0x43], rdx
movabs rdx, 0x230f0217110b1d19
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x4a18aa
movzx r9d, byte [rsp + rsi + 0x53]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x53], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x53], dl
add rax, 2
cmp rax, 0x3a
jge 0x4a18d7
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4a18fa
movzx r8d, byte [rsp + rdi + 0x53]
sub r8d, edx
cmp rsi, 0x2d
jb 0x4a188d
jmp 0x4a18ee
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x2d
call fcn.00449780
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.0045cd80
mov eax, edi
mov ecx, 0x2d
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004a17a0
Function at 0x4a1920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a1a78
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x3a427b9d59661c53
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xaa6e93aaa5996976
mov qword [rsp + 0x53], rdx
movabs rdx, 0x720265206caa6e93
mov qword [rsp + 0x58], rdx
movabs rdx, 0x61c8ab69963a74b6
mov qword [rsp + 0x60], rdx
movabs rdx, 0xada9936d20cb7e7d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x9d96648669955e6f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2b0104010300261e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x80f2b0104010300
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x220a1b2c27041f29
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf1613290a1d0824
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1a2301130a050424
mov qword [rsp + 0x33], rdx
movabs rdx, 0x23222b0d0b2c1806
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x4150c04081e2915
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4a1a16
movzx r9d, byte [rsp + rsi + 0x4b]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x4b], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x4b], dl
add rax, 2
cmp rax, 0x32
jge 0x4a1a48
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4a1a6b
movzx r8d, byte [rsp + rdi + 0x4b]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x2d
jb 0x4a19f9
jmp 0x4a1a5f
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x2d
call fcn.00449780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.0045cd80
mov eax, edi
mov ecx, 0x2d
call fcn.0045cd80
nop
call fcn.0045aaa0
nop dword [rax]
jmp fcn.004a1920

Function at 0x4a7220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a732c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1f737920c1786178
mov qword [rsp + 0x37], rdx
movabs rdx, 0xfbf32c5dad85fda5
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x20fbf32c5dad85fd
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf7b8e72e486d11d9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1208181712140307
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf160a110f020e05
mov qword [rsp + 0x23], rdx
movabs rdx, 0x90011130f160a11
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb11090e030e1809
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4a72c8
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4a72fc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4a731f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x19
jb 0x4a72ae
jmp 0x4a7313
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045cd80
mov eax, edi
mov ecx, 0x19
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004a7220
Function at 0x4ad580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad646
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8e67816120649462
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x856b798e
movabs rdx, 0x108050807090a08
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x80a080907070108
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4ad5e2
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
mov byte [rsp + rdi + 0x2d], r9b
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ad60f
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ad637
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ad5cb
jmp 0x4ad62b
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
nop dword [rax + rax]
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045cd80
mov eax, edi
mov ecx, 0xb
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004ad580

Function at 0x4ae820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae8e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2c386f7e694b2e74
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x463
movabs rdx, 0x507060408040508
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x7090809
xor eax, eax
jmp 0x4ae880
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4ae8b2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4ae8d7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0xa
jb 0x4ae863
jmp 0x4ae8cb
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045cd80
mov eax, edi
mov ecx, 0xa
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004ae820