joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a7ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7d9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2084f264a167a8a5
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x2e98e574932084f2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65736954dc44bdbb
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5130c13100d0f0c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf130f1301010a03
mov qword [rsp + 0x27], rdx
movabs rdx, 0x30b0c100f130f13
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x80d0f050d0e0600
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4a7d39
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4a7d6b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a7d8e
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x15
jb 0x4a7d1f
jmp 0x4a7d82
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004a7ca0

Function at 0x4a7dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7eac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x615f5d5c61475c5c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5711615f5d5c6147
mov qword [rsp + 0x38], rdx
movabs rdx, 0x39165e54051d7268
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd05110d06100410
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80a0d0c0109000f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa110301110a0002
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a7e4a
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a7e7c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a7e9f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0x12
jb 0x4a7e30
jmp 0x4a7e93
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a7dc0
Function at 0x4a8200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a82ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc8767f399b8ab28a
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd77dc8767f399b8a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x656d69b139797261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x301060e01090307
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7050d0401090208
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc06030c00090006
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a828a
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a82bc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a82df
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0x12
jb 0x4a8270
jmp 0x4a82d3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a8200

Function at 0x4a8300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a840c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1e6f76692d258edd
mov qword [rsp + 0x37], rdx
movabs rdx, 0x381f26da32e76fdf
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xb6381f26da32e76f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6534ec54203172fb
mov qword [rsp + 0x48], rdx
movabs rdx, 0x316031001171100
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1302000317001308
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc0e0d0313020003
mov qword [rsp + 0x27], rdx
movabs rdx, 0x7160b0a0f0f0e11
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4a83a8
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4a83dc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4a83ff
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0x19
jb 0x4a838e
jmp 0x4a83f3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462ca0
mov eax, edi
mov ecx, 0x19
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a8300
Function at 0x4a8560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a867a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7337417d786e8a43
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6f7261686c61715f
mov qword [rsp + 0x44], rdx
movabs rdx, 0x5e33752a6f726168
mov qword [rsp + 0x48], rdx
movabs rdx, 0x86706c547a336661
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10010e1b1604130f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x11210010e1b1604
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1003081610060117
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7090c0e1a110115
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe1912190807111b
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4a8617
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x22
jge 0x4a8649
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4a866d
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x27]
cmp rsi, 0x1c
jb 0x4a85fd
jmp 0x4a8661
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.0044d280
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1c
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.004a8560

Function at 0x4a86a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a87bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x79768ba841718199
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x616b5320b8ab65b2
mov qword [rsp + 0x46], rdx
movabs rdx, 0x5ca1616b5320b8ab
mov qword [rsp + 0x48], rdx
movabs rdx, 0x606d8c9a6e646361
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1607131111171107
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x419160713111117
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x160208060b0e0513
mov qword [rsp + 0x26], rdx
movabs rdx, 0x415100e010a0006
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x104000906071910
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4a8760
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4a878d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a87b0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a873d
jmp 0x4a87a4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a86a0
Function at 0x4a87e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a88ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x616a705771737a68
mov qword [rsp + 0x32], rdx
movabs rdx, 0x906e7d515320616a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7f6669742064688d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120d060f15010f04
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x120e060304140a00
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50b010a1506120e
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4a886d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jge 0x4a889a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a88bd
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a8850
jmp 0x4a88b1
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a87e0

Function at 0x4a88e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a89ec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5e707c7e20915575
mov qword [rsp + 0x37], rdx
movabs rdx, 0x65415c4b20795c65
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x7765415c4b20795c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6567864a20647161
mov qword [rsp + 0x48], rdx
movabs rdx, 0x17160a1702000f10
mov qword [rsp + 0x19], rdx
movabs rdx, 0x612040d050a0d02
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd0a0e000c150612
mov qword [rsp + 0x27], rdx
movabs rdx, 0xf0d070e0e160e09
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4a8988
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x20]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a89bc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4a89df
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x20]
cmp rsi, 0x19
jb 0x4a896e
jmp 0x4a89d3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462ca0
mov eax, edi
mov ecx, 0x19
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a88e0
Function at 0x4a8a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8aea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6efc34a82028c3b4
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x646efc34a82028c3
mov qword [rsp + 0x30], rdx
movabs rdx, 0x656d581620c4bc08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd050a0b0e0a0905
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x10b0d050a0b0e0a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x400090502050506
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4a8a8d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x4a8aba
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a8add
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4a8a70
jmp 0x4a8ad1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a8a00

Function at 0x4a8b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8bfd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7035ca7502204037
mov qword [rsp + 0x39], rdx
movabs rdx, 0xcddeb31524202f70
mov qword [rsp + 0x40], rdx
movabs rdx, 0x176da74220187261
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0d0c0d1403050e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x130816030a0e1305
mov qword [rsp + 0x27], rdx
movabs rdx, 0x11130816030a0e
mov qword [rsp + 0x29], rdx
movabs rdx, 0x60c030b0a141601
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4a8ba0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4a8bcd
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4a8bf0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4a8b7f
jmp 0x4a8be4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a8b00
Function at 0x4a8c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8d1d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x530233a700b47554
mov qword [rsp + 0x34], rdx
movabs rdx, 0xcb1cc96f530233a7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65e36965b3747203
mov qword [rsp + 0x40], rdx
movabs rdx, 0x904080e050f0b06
mov qword [rsp + 0x18], rdx
movabs rdx, 0x203090c120f1003
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe030f120203090c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x608040a02020305
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4a8cc0
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4a8ced
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4a8d10
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4a8c9f
jmp 0x4a8d04
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462ca0
mov eax, edi
mov ecx, 0x14
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a8c20

Function at 0x4a8e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8f4a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e51ad5378459846
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x7a6e51ad53784598
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8b7a693a20686c61
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10050d0f01060d01
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb0b10050d0f0106
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60d100f0306080a
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4a8eed
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x4a8f1a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a8f3d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4a8ed0
jmp 0x4a8f31
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a8e60
Function at 0x4a9060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a914c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5475614a7c9f797d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x28695475614a7c9f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7b206f366f799369
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc040b0e0204030f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40a11020c0a0609
mov qword [rsp + 0x26], rdx
movabs rdx, 0x102040f00030e0e
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a90ea
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a911c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a913f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x12
jb 0x4a90d0
jmp 0x4a9133
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a9060

Function at 0x4a9160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9268
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x207082af7f6e8168
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x3f8eac706f7c7578
mov qword [rsp + 0x42], rdx
movabs rdx, 0xa96e6a935e8d3f8e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9e6d697420647b50
mov qword [rsp + 0x50], rdx
movabs rdx, 0x406001a0d1a1611
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0312170f10081d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1308050315080a03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x170e150001060e06
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4a920b
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
cmp rax, 0x1e
jge 0x4a9238
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4a925b
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4a91ee
jmp 0x4a924f
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1e
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a9160
Function at 0x4a9280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a936c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7438112a6fa3d953
mov qword [rsp + 0x35], rdx
movabs rdx, 0x490b617438112a6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x32e73854372c1647
mov qword [rsp + 0x40], rdx
movabs rdx, 0x905020b020c0d0b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa0c120909010905
mov qword [rsp + 0x25], rdx
movabs rdx, 0x12100a0e04060511
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a930a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a933c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a935f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0x13
jb 0x4a92f0
jmp 0x4a9353
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a9280

Function at 0x4a94a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a958a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2d075320696a69f3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x646e2d075320696a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x54f69202958f31f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc10000b0a000d11
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6000e110c10000b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706110007000a06
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4a952d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x4a955a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a957d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4a9510
jmp 0x4a9571
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a94a0
Function at 0x4a95a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a96bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6cb1888d92316981
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd49a537568948c6d
mov qword [rsp + 0x46], rdx
movabs rdx, 0x646ed49a53756894
mov qword [rsp + 0x48], rdx
movabs rdx, 0x658f69273f8f8561
mov qword [rsp + 0x50], rdx
movabs rdx, 0x180604160a05020f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x130a150f18060416
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc06160a0e0c0308
mov qword [rsp + 0x26], rdx
movabs rdx, 0x14090c0f02141418
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa000b0506090818
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4a9660
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4a968d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a96b0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a963d
jmp 0x4a96a4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a95a0

Function at 0x4a96e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a97db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x62606f66a26a8581
mov qword [rsp + 0x39], rdx
movabs rdx, 0x7e73a45a6a207362
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4f6669882064916a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0d0d100c0c1307
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd0c0c0e0b00030e
mov qword [rsp + 0x23], rdx
movabs rdx, 0xe160e0f05010d0c
mov qword [rsp + 0x29], rdx
movabs rdx, 0x61507040e0a0205
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4a9779
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a97ab
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4a97ce
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0x17
jb 0x4a975f
jmp 0x4a97c2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004a96e0