joyce8/EMBER2024-capa huggingface dataset:
Function at 0x498d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498eb8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x720e96fe5beef24
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x6efc200f310720e9
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe6f2207261d21dae
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd20c1d832492a2e
mov qword [rsp + 0x60], rdx
movabs rdx, 0xedeaf36c1512026f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x240800190b201e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x151a001800160d24
mov qword [rsp + 0x25], rdx
movabs rdx, 0x140014110808151a
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x10d221605032419
mov qword [rsp + 0x33], rdx
movabs rdx, 0x2212240e23231f02
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x9131a091c010f07
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x498e58
movzx r9d, byte [rsp + rsi + 0x4b]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x4b], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x4b], dl
add rax, 2
cmp rax, 0x2e
jge 0x498e88
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x498eab
movzx r8d, byte [rsp + rdi + 0x4b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x25
jb 0x498e3b
jmp 0x498e9f
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.00444ae0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00456860
mov eax, edi
mov ecx, 0x25
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.00498d80

Function at 0x499d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499e3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x687070626f658e75
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6b6e7e6a7879653a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7f656a666c6e206b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc120d000b081701
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70a081300041704
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1703070a08130004
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf040d0e010e0515
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x499dd9
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1a
jge 0x499e0b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x499e2e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x18
jb 0x499dbf
jmp 0x499e22
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456860
mov eax, edi
mov ecx, 0x18
call fcn.00456860
nop
nop dword [rax + rax]
call fcn.00454580
jmp fcn.00499d40
Function at 0x499e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499f6c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xd6adb3c269c59304
mov qword [rsp + 0x40], rdx
movabs rdx, 0xaaeaf995e5b1b1b6
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2eaba6ba666f006b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8020e050c11000d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x31508020e050c11
mov qword [rsp + 0x20], rdx
movabs rdx, 0x150f050b0b17040c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x14170a000b110f0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd09050601160716
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x499f08
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x61]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x499f3c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x499f5f
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x61]
cmp rsi, 0x18
jb 0x499eee
jmp 0x499f53
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456860
mov eax, edi
mov ecx, 0x18
call fcn.00456860
nop
call fcn.00454580
jmp fcn.00499e60

Function at 0x499f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a07b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd76310707865c3cb
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc83919d26450d763
mov qword [rsp + 0x40], rdx
movabs rdx, 0x331b745c1ec81668
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0c120f14150808
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5000508080f140b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb11141007000500
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8150a0d0b0d0112
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x49a019
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x49a04b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x49a06e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x16
jb 0x499fff
jmp 0x49a062
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456860
mov eax, edi
mov ecx, 0x16
call fcn.00456860
nop
nop dword [rax + rax]
call fcn.00454580
jmp fcn.00499f80
Function at 0x49a0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a1a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x36213928ddffe870
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3035c91b113ff6b7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x74e671360e302009
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc0a09010a15040d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf0808030c0a0901
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1305140203061016
mov qword [rsp + 0x28], rdx
movabs rdx, 0x706160112121014
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50c0405090e0c0b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49a14b
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
cmp rax, 0x24
jge 0x49a178
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49a19b
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x18
jb 0x49a12e
jmp 0x49a18f
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456860
mov eax, edi
mov ecx, 0x18
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0049a0a0

Function at 0x49d000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d12c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x957f9e6d99b99b20
mov qword [rsp + 0x47], rdx
movabs rdx, 0x6f957f9e6d99b99b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8569aa8dc46fa2ec
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8d5ae07645af9b20
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb4750a7736a0a263
mov qword [rsp + 0x60], rdx
movabs rdx, 0x10e0a051e011513
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa161613171b1a02
mov qword [rsp + 0x27], rdx
movabs rdx, 0x91014030a0c0620
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xc07060e160d1310
mov qword [rsp + 0x37], rdx
movabs rdx, 0x1a181c0a12131d02
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x49d0c6
movzx r9d, byte [rsp + rsi + 0x47]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x47], dl
mov byte [rsp + rsi + 0x47], r8b
add rax, 2
cmp rax, 0x28
jge 0x49d0fc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x49d11f
movzx r8d, byte [rsp + rdi + 0x47]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0x21
jb 0x49d0ac
jmp 0x49d113
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.00444ae0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00456860
mov eax, edi
mov ecx, 0x21
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0049d000
Function at 0x49d140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x49d2c7
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0xaa73ad79a300b972
mov qword [rsp + 0x5b], rdx
movabs rdx, 0x8c4a7265926ef896
mov qword [rsp + 0x63], rdx
movabs rdx, 0xf872c6ac6c8c4a72
mov qword [rsp + 0x68], rdx
movabs rdx, 0xd5bd975d5ead57bc
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1695a96d20b57e6c
mov qword [rsp + 0x78], rdx
movabs rdx, 0x65d7b497c5cac7a1
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1f091c152c2b1219
mov qword [rsp + 0x19], rdx
movabs rdx, 0x262b1f091c152c2b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x212141b291a0525
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2a2a261e230e0201
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x152b06171b152815
mov qword [rsp + 0x33], rdx
movabs rdx, 0x121e1f0b15080316
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xb27042211082207
mov qword [rsp + 0x43], rdx
movabs rdx, 0x80418241e0f0b04
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xb0727030d230823
mov qword [rsp + 0x53], rdx
xor eax, eax
jmp 0x49d260
movzx r9d, byte [rsp + rsi + 0x5b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x5b], dl
mov byte [rsp + rsi + 0x5b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x42
jge 0x49d292
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x49d2ba
movzx r8d, byte [rsp + rdi + 0x5b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0x2d
jb 0x49d242
jmp 0x49d2ae
xor eax, eax
lea rbx, [rsp + 0x5b]
mov ecx, 0x2d
nop
call fcn.00444ae0
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00456860
mov eax, edi
mov ecx, 0x2d
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0049d140

Function at 0x49d3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d4bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x78120b75ff66110b
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xbd14f5ad0978120b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xda1168fabefc2024
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30c0c140c000c03
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1403060913010b0d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1106001014030609
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xf140f110508100a
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x49d459
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x49d48b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x49d4ae
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0x15
jb 0x49d43f
jmp 0x49d4a2
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456860
mov eax, edi
mov ecx, 0x15
call fcn.00456860
nop
nop dword [rax + rax]
call fcn.00454580
jmp fcn.0049d3c0
Function at 0x49d7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d8aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x60ee6360aeaaac09
mov qword [rsp + 0x37], rdx
movabs rdx, 0xc960ee6360aeaaac
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8c666f200b6c91cc
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc04100610070604
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x30104000102020a
mov qword [rsp + 0x27], rdx
movabs rdx, 0x8030410000906
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x49d84d
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x49d87a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x49d89d
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x49d830
jmp 0x49d891
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456860
mov eax, edi
mov ecx, 0x11
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0049d7c0

Function at 0x49e480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e5b8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x454844616c7f657a
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x7d6e703320454844
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6f208a755c607180
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3e8e7fa457445bca
mov qword [rsp + 0x60], rdx
movabs rdx, 0x20794f5274794d3e
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc000f2319191915
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe0d1b1223171c16
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1e1219151f1c0e0d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x102123091d1a0c22
mov qword [rsp + 0x33], rdx
movabs rdx, 0x50718040d120a02
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1b12001c06232305
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x49e555
movzx r9d, byte [rsp + rsi + 0x4b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x4b], dl
mov byte [rsp + rsi + 0x4b], r8b
add rax, 2
cmp rax, 0x2e
jge 0x49e588
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x49e5ab
movzx r8d, byte [rsp + rdi + 0x4b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
nop
cmp rsi, 0x25
jb 0x49e53b
jmp 0x49e59f
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.00444ae0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00456860
mov eax, edi
mov ecx, 0x25
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.0049e480
Function at 0x49ed00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49edc7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4e014e6f0ee6431b
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x1d1e414e
movabs rdx, 0x905060a0a030a02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x503020708010005
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x49ed68
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x49ed97
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x49edba
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x49ed4b
jmp 0x49edae
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456860
mov eax, edi
mov ecx, 0xb
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0049ed00

Function at 0x4a04e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a0618
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xbca05ce8b766658a
mov qword [rsp + 0x46], rdx
movabs rdx, 0xcefabca05ce8b766
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa4666f206414658f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8fcd54c6d8d442d1
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6f960279743bbb4e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1c08081306090700
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1a1b18121c201403
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc1f2111170c1a1b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x515131c14140420
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80a141b1b001911
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc130c1315172116
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4a05b8
movzx r9d, byte [rsp + rsi + 0x46]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x46], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x46], dl
add rax, 2
cmp rax, 0x2e
jge 0x4a05e8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x4a060b
movzx r8d, byte [rsp + rdi + 0x46]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x22
jb 0x4a059b
jmp 0x4a05ff
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.00444ae0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00456860
mov eax, edi
mov ecx, 0x22
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.004a04e0
Function at 0x4a8600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a870c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xd7746365a61fdbf5
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe8ebe6ce756ceae6
mov qword [rsp + 0x46], rdx
movabs rdx, 0x496ee8ebe6ce756c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6d561dd672c9f3e8
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3030816140e0317
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x13001201180d0219
mov qword [rsp + 0x26], rdx
movabs rdx, 0x312020319070c12
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd120c0f09031712
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4a86a8
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a86dc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4a86ff
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0x1a
jb 0x4a868e
jmp 0x4a86f3
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456860
mov eax, edi
mov ecx, 0x1a
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004a8600

Function at 0x4a8720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a880a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd74d365b26908ae
mov qword [rsp + 0x37], rdx
movabs rdx, 0xd00d74d365b26908
mov qword [rsp + 0x38], rdx
movabs rdx, 0x19f7dccada1807bd
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc07090107030200
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10b050210100100
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa02080a0e0f0e0d
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4a87ad
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x4a87da
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a87fd
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x4a8790
jmp 0x4a87f1
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456860
mov eax, edi
mov ecx, 0x11
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004a8720
Function at 0x4a9400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a94bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2f032e31d05d072e
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6e
movabs rdx, 0x607000606030104
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x10204
xor eax, eax
nop
jmp 0x4a9460
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x24]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x24]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4a948d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a94b0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4a9442
jmp 0x4a94a4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456860
mov eax, edi
mov ecx, 9
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.004a9400

Function at 0x4aa9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aaa8c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2e7445653d262319
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20562e7445653d26
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65b03c5165336c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb01010b000d1102
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf0505020b01010b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30d11110305090e
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4aaa2a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4aaa5c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4aaa7f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0x12
jb 0x4aaa10
jmp 0x4aaa73
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456860
mov eax, edi
mov ecx, 0x12
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004aa9a0
Function at 0x4b3700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b37ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdc908ce6b6109ac
mov qword [rsp + 0x34], rdx
movabs rdx, 0x296cbe050dc908ce
mov qword [rsp + 0x38], rdx
movabs rdx, 0x74651366b46ffe3c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf05020800020c11
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd000b1104110f05
mov qword [rsp + 0x24], rdx
movabs rdx, 0x506040401070109
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4b378d
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jge 0x4b37ba
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b37dd
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4b3770
jmp 0x4b37d1
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456860
mov eax, edi
mov ecx, 0x14
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004b3700

Function at 0x4b4ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4dca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x65d564a765446966
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x98207365d564a765
mov qword [rsp + 0x30], rdx
movabs rdx, 0xdf73d4cac2df74d6
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0610100d0f0204
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa0b06020e061010
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf0e060d120f0a10
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4b4d6d
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x14
jge 0x4b4d9a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b4dbd
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b4d50
jmp 0x4b4db1
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456860
mov eax, edi
mov ecx, 0x13
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004b4ce0