joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47d480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d53d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3d3b553d734e0036
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x74
movabs rdx, 0x402070004070401
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x7010600
xor eax, eax
nop
jmp 0x47d4e0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x47d50d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47d530
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x47d4c2
jmp 0x47d524
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045a8c0
mov eax, edi
mov ecx, 9
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.0047d480

Function at 0x47edc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ee87
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf059465e737261b8
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xe761
movabs rdx, 0x709090604090000
mov qword [rsp + 0x18], rdx
movabs rdx, 0x907040907090709
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x47ee27
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x47ee57
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x47ee7a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x47ee0a
jmp 0x47ee6e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xa
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0047edc0

Function at 0x47eea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ef66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6fc7dd65f272de68
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x634c
movabs rdx, 0x600050608010309
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x6030001
xor eax, eax
jmp 0x47ef00
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x47ef32
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47ef57
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0xa
jb 0x47eee3
jmp 0x47ef4b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xa
nop
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0047eea0
Function at 0x483280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483338
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3c156f3f6fbf6fe7
mov qword [rsp + 0x28], rdx
movabs rdx, 0x204070600060200
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x407
xor eax, eax
jmp 0x4832d5
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x483308
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x48332b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
nop
cmp rsi, 8
jb 0x4832bb
jmp 0x48331f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045a8c0
mov eax, edi
mov ecx, 8
call fcn.0045a8c0
nop
call fcn.004585e0
nop dword [rax]
jmp fcn.00483280

Function at 0x4840a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48416c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfd025f200e701e43
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xac8702f8
movabs rdx, 0x3040b0a0b040104
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7080b060609090a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x484105
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x48413c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x48415f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0xc
jb 0x4840eb
jmp 0x484153
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xc
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004840a0

Function at 0x4844a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484566
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9cd4cbc43d76c344
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6990
movabs rdx, 0x403050708070703
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x1050406
xor eax, eax
jmp 0x484500
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x484532
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x484557
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0xa
jb 0x4844e3
jmp 0x48454b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xa
nop
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004844a0
Function at 0x484600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4846b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc1aaa96f6c2d3121
mov qword [rsp + 0x28], rdx
movabs rdx, 0x200050002070600
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x5010202
xor eax, eax
jmp 0x484656
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x484688
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4846ab
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
cmp rsi, 8
jb 0x48463c
jmp 0x48469f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045a8c0
mov eax, edi
mov ecx, 8
call fcn.0045a8c0
nop
call fcn.004585e0
nop dword [rax]
jmp fcn.00484600

Function at 0x4880a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488152
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x41271f3265099f2b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x200040506050601
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4880ee
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x488122
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x488145
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 8
jb 0x4880d4
nop
jmp 0x488139
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00447380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045a8c0
mov eax, edi
mov ecx, 8
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004880a0

Function at 0x48aae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ab9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6e5d740c5f43134f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x1c69
movabs rdx, 0x109040706040204
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x7060406
xor eax, eax
jmp 0x48ab40
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x48ab6d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x48ab90
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x48ab23
jmp 0x48ab84
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xa
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.0048aae0
Function at 0x48ae80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48af6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd0d6f06ca0ced4f
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xbe0d0d6f06ca0ced
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1721a4946172005f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x708070701040e0a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x308020d07080707
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3100f06020a0708
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x48af0d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x48af3a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48af5d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x48aef0
jmp 0x48af51
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x11
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0048ae80

Function at 0x48e560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e618
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb2df186bb0e96956
mov qword [rsp + 0x28], rdx
movabs rdx, 0x303060303050207
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x607
xor eax, eax
jmp 0x48e5b5
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x48e5e8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x48e60b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
nop
cmp rsi, 8
jb 0x48e59b
jmp 0x48e5ff
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045a8c0
mov eax, edi
mov ecx, 8
call fcn.0045a8c0
nop
call fcn.004585e0
nop dword [rax]
jmp fcn.0048e560
Function at 0x48ea40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48eb1d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x61817d62696e8d5a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6772617261537968
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6060f0c0206080b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2090f0208050606
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80301030c0f0909
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x48eac0
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x48eaed
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x48eb10
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x48eaa2
jmp 0x48eb04
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x10
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.0048ea40

Function at 0x48ebc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ec87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xacebb3ac69e5f442
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6c142e74
movabs rdx, 0x205070506010a07
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x104060106090705
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x48ec28
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x48ec57
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x48ec7a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x48ec0b
jmp 0x48ec6e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xc
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0048ebc0
Function at 0x493580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49366a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2f86e1c5cf36525
mov qword [rsp + 0x36], rdx
movabs rdx, 0xea2202f86e1c5cf3
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa2274ef631f64e1
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe00060c0a080203
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1103080202090007
mov qword [rsp + 0x26], rdx
movabs rdx, 0x410000c030910
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x49360d
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jge 0x49363a
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49365d
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x4935f0
jmp 0x493651
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x12
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.00493580

Function at 0x4983c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498486
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc18f2db7cc2b6fc0
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x34
movabs rdx, 0x607030307050302
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x400
xor eax, eax
nop
jmp 0x498420
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x498452
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x498477
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 9
jb 0x498402
jmp 0x49846b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045a8c0
mov eax, edi
mov ecx, 9
nop
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004983c0
Function at 0x4a5e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5f98
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x3420642d16d67c03
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x6e6120bcb2342064
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc7cabda6b0d4209b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xfaa79a64209b4733
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6e675200a77db66f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x415201308021c1b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x22080d161a071111
mov qword [rsp + 0x25], rdx
movabs rdx, 0x3040013011b2208
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1421141203091310
mov qword [rsp + 0x33], rdx
movabs rdx, 0x220d1522141f0f1a
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1e080d0421001517
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4a5f38
movzx r9d, byte [rsp + rsi + 0x4b]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x4b], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x4b], dl
add rax, 2
cmp rax, 0x2e
jge 0x4a5f68
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4a5f8b
movzx r8d, byte [rsp + rdi + 0x4b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x25
jb 0x4a5f1b
jmp 0x4a5f7f
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.00447380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x25
call fcn.0045a8c0
nop
call fcn.004585e0
nop dword [rax]
jmp fcn.004a5e60

Function at 0x4a9480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a956a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe65f575ff83fe9a
mov qword [rsp + 0x33], rdx
movabs rdx, 0xfb74e9a3700e65f5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x64dcabab0500ad64
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe09100a020311
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x50c130c010f100a
mov qword [rsp + 0x23], rdx
movabs rdx, 0x70e050e13070e12
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4a950d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jge 0x4a953a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a955d
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4a94f0
jmp 0x4a9551
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x15
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004a9480
Function at 0x4aa9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aaabb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7815e608f7ada920
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xfe74de9af67815e6
mov qword [rsp + 0x40], rdx
movabs rdx, 0x25e3bb74eaed2064
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1212061304100a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x131312010c020603
mov qword [rsp + 0x25], rdx
movabs rdx, 0x514051408021313
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x906020a04140f10
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4aaa59
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4aaa8b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4aaaae
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 0x15
jb 0x4aaa3f
jmp 0x4aaaa2
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00447380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x15
call fcn.0045a8c0
nop
nop dword [rax + rax]
call fcn.004585e0
jmp fcn.004aa9c0

Function at 0x4aad60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aae32
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7f6e776f6ec6a6d0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x978a3774bab07f6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd09080d0d020d00
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x208070b01020c0d
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4aadcc
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4aadfe
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4aae25
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0xe
jb 0x4aadb2
jmp 0x4aae15
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xe
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004aad60
Function at 0x4ab0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab192
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8a8c697aa17d6f20
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7a98399e95208a8c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9050b03060a090c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd0a0706020d0b04
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4ab12c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ab15e
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ab185
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0xe
jb 0x4ab112
jmp 0x4ab175
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xe
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004ab0c0

Function at 0x4ae300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae42c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x988563906c7847a9
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x4697988563906c78
mov qword [rsp + 0x40], rdx
movabs rdx, 0x796664209f73965d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7f9574982d6e956e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x207c35a387852e80
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e08060d1d0b0418
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1c200f1e08060d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1a070d081f1613
mov qword [rsp + 0x26], rdx
movabs rdx, 0x111c200a1101190f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x111b160c0d040219
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4ae3c6
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x24
jge 0x4ae3fc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x4ae41f
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x22
jb 0x4ae3ac
jmp 0x4ae413
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.00447380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x22
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004ae300