joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49e480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e538
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf0872101f6766f76
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x300050304070706
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
jmp 0x49e4d8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x49e508
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x49e52b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x49e4bb
jmp 0x49e51f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00460ec0
mov eax, edi
mov ecx, 8
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.0049e480

Function at 0x49f420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f53a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x94120183f646a85
mov qword [rsp + 0x18], rdx
movabs rdx, 0x61f3384030c14b72
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1f8b61f3384030c1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2be4f7114d644261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc170e150d180102
mov qword [rsp + 0x32], rdx
movabs rdx, 0x190d16040b0a0c17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3101619070a1818
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150313000b0909
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40a15110b110413
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x49f4d7
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x26
jge 0x49f509
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x49f52d
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 0x1a
jb 0x49f4bd
jmp 0x49f521
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044b900
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00460ec0
nop
call fcn.0045ec40
nop
jmp fcn.0049f420
Function at 0x4a0380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a047d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x656d1854206f4753
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7fbbca85314656d
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc33c690897deb411
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1150d15010b0b05
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa0b0c0805111211
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe0e080d0a0a0a0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc100e0f140c150c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a0420
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4a044d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a0470
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a03ff
jmp 0x4a0464
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460ec0
mov eax, edi
mov ecx, 0x16
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004a0380

Function at 0x4a0720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a081b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xafaf6938edd5cdd8
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbcaa61df6320afaf
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc4c836d920594b4b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x15020c1201150100
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe04090e07031012
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe090f0313121201
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1206140f030a100d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a07b9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a07eb
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a080e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
cmp rsi, 0x16
jb 0x4a079f
jmp 0x4a0802
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460ec0
mov eax, edi
mov ecx, 0x16
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.004a0720
Function at 0x4a11c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a12ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd08379ab7f683d83
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa56eb9d08379ab7f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x656de454207d728e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa00000b0d0b100d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x305050704000803
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7000d0603060105
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a124a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a127c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a129f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x31]
cmp rsi, 0x13
jb 0x4a1230
jmp 0x4a1293
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460ec0
mov eax, edi
mov ecx, 0x13
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004a11c0

Function at 0x4a4960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4a4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6469e6659be85d4d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x64a3c9b4ada06f65
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0b0a5babc644061
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0c160102171102
mov qword [rsp + 0x18], rdx
movabs rdx, 0x517110e15141316
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0d020b17030213
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4a49ea
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5c]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a4a1c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a4a3f
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5c]
cmp rsi, 0x18
jb 0x4a49d0
jmp 0x4a4a33
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460ec0
mov eax, edi
mov ecx, 0x18
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004a4960
Function at 0x4a4a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4b5b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3c0472fbd8730848
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf16e3b49093c0472
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc6c82a5446644b61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110080704130413
mov qword [rsp + 0x32], rdx
movabs rdx, 0x130013060d0e140a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30a100a090d1300
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1204120a0c120600
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a4af9
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a4b2b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a4b4e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x15
jb 0x4a4adf
jmp 0x4a4b42
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460ec0
mov eax, edi
mov ecx, 0x15
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.004a4a60

Function at 0x4a62e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a63fd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20775342552b7043
mov qword [rsp + 0x18], rdx
movabs rdx, 0x415f71206147716a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x732f415f71206147
mov qword [rsp + 0x22], rdx
movabs rdx, 0x535f6b70207a7930
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe03101202100a10
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf06181605040e03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140e171906010916
mov qword [rsp + 0x40], rdx
movabs rdx, 0x819110219090d17
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf130a0810160618
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a63a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4a63cd
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a63f0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a637d
jmp 0x4a63e4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004a62e0
Function at 0x4a6b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6c6c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xdd6d94798c6556e7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe05ddb740a2751e0
mov qword [rsp + 0x26], rdx
movabs rdx, 0x76d69f1e396a788
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110a0417100a1217
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb03110a0417100a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9170614080e1011
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170d0e1301110b07
mov qword [rsp + 0x48], rdx
movabs rdx, 0x101405130f110800
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a6c08
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4a6c3c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4a6c5f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x18
jb 0x4a6bee
jmp 0x4a6c53
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460ec0
mov eax, edi
mov ecx, 0x18
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004a6b60

Function at 0x4a6c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6d7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaa653c73caa655a5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xea6ee08691aa653c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd10969a37a9654cd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc06130c0f090507
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0205111001030c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd131400030a0e02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8000c060c0a0313
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a6d20
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4a6d4d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a6d70
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4a6cff
jmp 0x4a6d64
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460ec0
mov eax, edi
mov ecx, 0x15
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004a6c80
Function at 0x4a6ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6fba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x69fe22c6bab272cf
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e19743ecdaa1127
mov qword [rsp + 0x23], rdx
movabs rdx, 0x126e19743ecdaa11
mov qword [rsp + 0x24], rdx
movabs rdx, 0x77b5692920cb2b61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1009060b0c041315
mov qword [rsp + 0x34], rdx
movabs rdx, 0x41805181009060b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8051012000b08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x101005170b180009
mov qword [rsp + 0x48], rdx
movabs rdx, 0x302020e130a0317
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a6f57
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x4a6f89
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4a6fad
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0x19
jb 0x4a6f3d
jmp 0x4a6fa1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044b900
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460ec0
mov eax, edi
mov ecx, 0x19
call fcn.00460ec0
nop
call fcn.0045ec40
nop
jmp fcn.004a6ea0

Function at 0x4a8a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8b4c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x29be20286127be13
mov qword [rsp + 0x19], rdx
movabs rdx, 0xee6e6129be202861
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe86da3542010722b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x107100400010706
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0d0d0001071004
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2010a0101040112
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a8aea
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4a8b1c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a8b3f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0x13
jb 0x4a8ad0
jmp 0x4a8b33
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460ec0
mov eax, edi
mov ecx, 0x13
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004a8a60
Function at 0x4a9120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a923a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xccd191c4d6bec6db
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe0865e0f9d9fe4e4
mov qword [rsp + 0x21], rdx
movabs rdx, 0x64057bd3a0e0865e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65da6954d3e3d1a7
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0d17150b021810
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50a0c0d17150b02
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf120400050f0608
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b111307010e0c09
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7030d160d011617
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a91d7
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x22
jge 0x4a9209
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4a922d
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0x1d
jb 0x4a91bd
jmp 0x4a9221
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.0044b900
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1d
call fcn.00460ec0
nop
call fcn.0045ec40
nop
jmp fcn.004a9120

Function at 0x4a9740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a983d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x96899177c4618041
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x643496899177c461
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x92eeab88b4879389
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0f0d080d0f0b10
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe030f060c080b08
mov qword [rsp + 0x36], rdx
movabs rdx, 0x11070e030f060c08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4050a050c0a0e01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a97e0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4a980d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a9830
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4a97bf
jmp 0x4a9824
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460ec0
mov eax, edi
mov ecx, 0x12
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004a9740
Function at 0x4a9860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a995b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e3f6c65457a4f48
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x236e613150676e3f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x426d595c205c72fb
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd080209150a1201
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20402090a0a0a09
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x13150309150e0204
mov qword [rsp + 0x40], rdx
movabs rdx, 0x600001013101313
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a98f9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a992b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a994e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x16
jb 0x4a98df
jmp 0x4a9942
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460ec0
mov eax, edi
mov ecx, 0x16
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.004a9860

Function at 0x4aa380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa46c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6255aeef998e6192
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc36ed9be6255aeef
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa46da35491a57298
mov qword [rsp + 0x28], rdx
movabs rdx, 0x81105040f000704
mov qword [rsp + 0x30], rdx
movabs rdx, 0x207090503130e0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110e1105090c060f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4aa40a
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4aa43c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4aa45f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x14
jb 0x4aa3f0
jmp 0x4aa453
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460ec0
mov eax, edi
mov ecx, 0x14
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004aa380
Function at 0x4aa7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa8dd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3a58245a50233d54
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x436e033a58245a50
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5d6d225a20181f61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20d101001010c02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x403100205080a10
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc06040310020508
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1006081208080f07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4aa880
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4aa8ad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4aa8d0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4aa85f
jmp 0x4aa8c4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460ec0
mov eax, edi
mov ecx, 0x13
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004aa7e0

Function at 0x4b18a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b198a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x216bd42b66191c4e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc91c7fd600216bd4
mov qword [rsp + 0x22], rdx
movabs rdx, 0xdf0f135420641861
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x12130c140e050a0a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90c141402011213
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa070c0b0e040808
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b192d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x4b195a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b197d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4b1910
jmp 0x4b1971
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460ec0
mov eax, edi
mov ecx, 0x15
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004b18a0
Function at 0x4b1d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1e6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72532061795e6454
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6472617253206179
mov qword [rsp + 0x22], rdx
movabs rdx, 0x776f8c75205f8085
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20c010d0210070b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1001020c0309020c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2010d1012110f01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b1e0a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b1e3c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b1e5f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0x13
jb 0x4b1df0
jmp 0x4b1e53
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460ec0
mov eax, edi
mov ecx, 0x13
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004b1d80