joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a5be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5cdb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65747314858ffb16
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe8a3f5f4e91650a1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x517fdd540a53ff36
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15030e04010b090e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf100c0a0c170800
mov qword [rsp + 0x22], rdx
movabs rdx, 0x416040d150f10
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90f1311020f1112
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a5c79
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a5cab
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a5cce
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
cmp rsi, 0x18
jb 0x4a5c5f
jmp 0x4a5cc2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462ca0
mov eax, edi
mov ecx, 0x18
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004a5be0

Function at 0x4a5e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5f3d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x303a35456ef0e829
mov qword [rsp + 0x32], rdx
movabs rdx, 0x55320e745345303a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11fa69224f2f7261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60c0508020601
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1415140712120714
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb11141514071212
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc1314060d041410
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4a5ee0
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4a5f0d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a5f30
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a5ebf
jmp 0x4a5f24
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a5e40
Function at 0x4a6080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a619d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xce411c73a49dab54
mov qword [rsp + 0x42], rdx
movabs rdx, 0x9ebbfdc5253cebbd
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x516eb4a753209ebb
mov qword [rsp + 0x50], rdx
movabs rdx, 0x65b301a0bf076dc7
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20312080d0b051b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1801150102031208
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8090b130d0f090a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1608010c13051917
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa1a181c071b0f0e
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x4a6140
movzx r9d, byte [rsp + rsi + 0x42]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x42], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4a616d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4a6190
movzx r8d, byte [rsp + rdi + 0x42]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4a611d
jmp 0x4a6184
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1e
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a6080

Function at 0x4a61c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a62bb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x38c4bb20f5626d28
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe6e638c4bb20f562
mov qword [rsp + 0x38], rdx
movabs rdx, 0xfa0beb4cc8642b61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x111001030f08100e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x100d050303050603
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb09100d05030305
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe00090505070000
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a6259
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a628b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a62ae
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
cmp rsi, 0x12
jb 0x4a623f
jmp 0x4a62a2
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004a61c0
Function at 0x4a6660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6768
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa850205f55676153
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6123847f6b82af67
mov qword [rsp + 0x46], rdx
movabs rdx, 0x587b6123847f6b82
mov qword [rsp + 0x48], rdx
movabs rdx, 0x656d8c5c5e647280
mov qword [rsp + 0x50], rdx
movabs rdx, 0x807080e1510110d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1216031204071708
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30409150c170b02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30c0a150a110811
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4a670b
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x20
jge 0x4a6738
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a675b
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a66ee
jmp 0x4a674f
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a6660

Function at 0x4a6880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6988
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xfbb28bea31ec5355
mov qword [rsp + 0x37], rdx
movabs rdx, 0x8f61ba0630016961
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xab8f61ba06300169
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6a6df1e3202587ab
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50f120315131807
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb06030715021205
mov qword [rsp + 0x21], rdx
movabs rdx, 0x20d1611060a0b06
mov qword [rsp + 0x27], rdx
movabs rdx, 0x16050f0a0c04100a
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4a692b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1e
jge 0x4a6958
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4a697b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x4a690e
jmp 0x4a696f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462ca0
mov eax, edi
mov ecx, 0x19
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a6880
Function at 0x4a69a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6a9b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20f62069dac96148
mov qword [rsp + 0x35], rdx
movabs rdx, 0x646e3f20f62069da
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4307512dee472e0
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0b0206060f060e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x71210120f060308
mov qword [rsp + 0x23], rdx
movabs rdx, 0x706071210120f06
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd0f111006080d0d
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a6a39
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a6a6b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a6a8e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x13
jb 0x4a6a1f
jmp 0x4a6a82
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004a69a0

Function at 0x4a6c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6d0c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc403bc6fbce0a94e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x4f5e9ee2aaba9e9e
mov qword [rsp + 0x46], rdx
movabs rdx, 0xc1834f5e9ee2aaba
mov qword [rsp + 0x48], rdx
movabs rdx, 0x956dc8b790ad7261
mov qword [rsp + 0x50], rdx
movabs rdx, 0x171716190a071111
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1409110c1416060e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb01060508110e03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x509150f0502100d
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4a6ca8
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a6cdc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4a6cff
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x65]
cmp rsi, 0x1a
jb 0x4a6c8e
jmp 0x4a6cf3
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a6c00
Function at 0x4a6d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6e3d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x19f62b424063db50
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2b33f60d6e4474ff
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x8c651040f5ec2b33
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf36f6324366536fd
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1304080d08110d15
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3120f0c01150610
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0e08071d1d1a0f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x406050f19081106
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10f111715161904
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x4a6de0
movzx r9d, byte [rsp + rsi + 0x42]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x42], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4a6e0d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4a6e30
movzx r8d, byte [rsp + rdi + 0x42]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4a6dbd
jmp 0x4a6e24
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1e
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a6d20

Function at 0x4a6e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6f4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x99aae06eaf66b1a6
mov qword [rsp + 0x35], rdx
movabs rdx, 0xda3d9e99aae06eaf
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa26de4c320e7e8ac
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0c050506090d07
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc0a01070b031003
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf12050200080612
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a6eed
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jge 0x4a6f1a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a6f3d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4a6ed0
jmp 0x4a6f31
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a6e60
Function at 0x4a6f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a706c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe8fc7c407479141b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x61df79f9f0fd1841
mov qword [rsp + 0x46], rdx
movabs rdx, 0xe4e561df79f9f0fd
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa3e9d1f4e68e7261
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa0901050a0917
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60a07190b0d170d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1611020c04020214
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe10141806171501
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4a7008
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a703c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4a705f
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0x1a
jb 0x4a6fee
jmp 0x4a7053
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a6f60

Function at 0x4a72c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a73aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x741edb6122c579cb
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3519f4741edb6122
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf2220054204c3126
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc12050d06080206
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50a10030d0c12
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc0a050006110b09
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a734d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x4a737a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a739d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4a7330
jmp 0x4a7391
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a72c0
Function at 0x4a74e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a75db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x39b4b35e74afb7e9
mov qword [rsp + 0x39], rdx
movabs rdx, 0x6409bba7e93bb839
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65f869cab6ecac61
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1207061105000c01
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6090d0202151310
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1211120a0b060609
mov qword [rsp + 0x29], rdx
movabs rdx, 0xb08050a0409020a
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4a7579
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a75ab
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4a75ce
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x17
jb 0x4a755f
jmp 0x4a75c2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004a74e0

Function at 0x4a7600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a771d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf7b8da6f113f1e07
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xc461b4b420fc8479
mov qword [rsp + 0x47], rdx
movabs rdx, 0xbcc461b4b420fc84
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65cd6954ca157461
mov qword [rsp + 0x50], rdx
movabs rdx, 0x70d0013050f0207
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1408070d0013050f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3120c0f120a1306
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa01090112120208
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x100d0905010a17
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4a76c0
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4a76ed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4a7710
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4a769d
jmp 0x4a7704
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462ca0
mov eax, edi
mov ecx, 0x19
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a7600
Function at 0x4a7740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a783d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x19cb056583720949
mov qword [rsp + 0x34], rdx
movabs rdx, 0xfdc0db4e19cb0565
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6539cbd42064baf6
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3100c010805070b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x30d10070a0c050a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7010b11030d1007
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8090d0912090601
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4a77e0
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4a780d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4a7830
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4a77bf
jmp 0x4a7824
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462ca0
mov eax, edi
mov ecx, 0x14
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a7740

Function at 0x4a7860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a794a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd206110df2075c4
mov qword [rsp + 0x35], rdx
movabs rdx, 0x656fe80d206110df
mov qword [rsp + 0x38], rdx
movabs rdx, 0x19897dfcc9245a9c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1004090400000011
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x812110304121004
mov qword [rsp + 0x25], rdx
movabs rdx, 0xe120e0b0d02070f
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a78ed
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x4a791a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a793d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4a78d0
jmp 0x4a7931
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a7860
Function at 0x4a7a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7b5d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfd533e6361f7430c
mov qword [rsp + 0x35], rdx
movabs rdx, 0x644b3afd533e6361
mov qword [rsp + 0x38], rdx
movabs rdx, 0x654f533e20522355
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7050c0f00000502
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x70c0f010f080907
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1110070c0f010f08
mov qword [rsp + 0x25], rdx
movabs rdx, 0x2040d0b02090000
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a7b00
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4a7b2d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a7b50
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4a7adf
jmp 0x4a7b44
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a7a60

Function at 0x4a7b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7c7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf968f9689672aa10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x535a6151544455fd
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65d469ed5264c6cf
mov qword [rsp + 0x48], rdx
movabs rdx, 0x105110309060e07
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa110b070600130c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x810031316140f0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90c060a13100711
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a7c19
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a7c4b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a7c6e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0x18
jb 0x4a7bff
jmp 0x4a7c62
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462ca0
mov eax, edi
mov ecx, 0x18
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004a7b80