joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a0f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a100c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xee0018a1f941fbbc
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1bee0018a1f941fb
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb62215c7eb18876f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0408050f0d0410
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30706000e040805
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc0106100b0f0a06
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4a0faa
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x4a0fdc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a0fff
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0x11
jb 0x4a0f90
jmp 0x4a0ff3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a0f20

Function at 0x4a1020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a10dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74ae0813534153a4
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x1896
movabs rdx, 0x804050508060905
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x5060005
xor eax, eax
jmp 0x4a1080
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x4a10ad
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4a10d0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4a1063
jmp 0x4a10c4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a1020
Function at 0x4a1100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a11e6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x47413b24b742fd2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf06d3d3879620474
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb05050304030d05
mov qword [rsp + 0x18], rdx
movabs rdx, 0x30b0505030403
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa0d030a0a07010b
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4a1180
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1e]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4a11b2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a11d7
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1e]
cmp rsi, 0xe
jb 0x4a1162
jmp 0x4a11cb
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a1100

Function at 0x4a1200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a12c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6e71897c7e768667
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x777d966e
movabs rdx, 0x306050201040608
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x9020a07
xor eax, eax
jmp 0x4a1260
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4a1292
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4a12b7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1e]
cmp rsi, 0xb
jb 0x4a1244
jmp 0x4a12ab
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a1200
Function at 0x4a12e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a13ac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xddf332302ac83f2c
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x312f
movabs rdx, 0x506040802010907
mov qword [rsp + 0x18], rdx
movabs rdx, 0x509000300010506
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x4a1344
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xe
jge 0x4a137c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4a139f
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0xa
jb 0x4a132a
jmp 0x4a1393
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a12e0

Function at 0x4a1ee0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a1faa
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0
call fcn.00403300
xorps xmm15, xmm15
mov r14, qword [0x0063d818]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
jne 0x4a1f8f
mov rcx, qword [rsp + 0x60]
lea rdx, [rcx + 1]
mov qword [rsp + 0x40], rdx
lea rax, [0x004cbe20]
xor ebx, ebx
mov rcx, rdx
call fcn.00449100
mov rbx, qword [rsp + 0x60]
mov rcx, rax
xor edi, edi
mov rsi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x58]
nop dword [rax]
call fcn.004a24e0
inc rbx
cmp rcx, rbx
jae 0x4a1f7e
mov edi, 1
lea rsi, [0x004cbe20]
call fcn.004491e0
mov word [rax + rbx*2 - 2], 0
xor edi, edi
xor esi, esi
add rsp, 0x48
pop rbp
ret
xor eax, eax
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x00506ba8]
lea rsi, [0x00506820]
add rsp, 0x48
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.004609c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.004a1ee0
Function at 0x4a3c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3d46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x65920a03618b8482
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2920090835726592
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2060a0a0405000b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x201060902060a0a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20b0d0106060d01
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4a3ce0
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4a3d12
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a3d37
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0xe
jb 0x4a3cc2
jmp 0x4a3d2b
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a3c60

Function at 0x4a49c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4a8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x548380886eee7cc3
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x7c6c762e
movabs rdx, 0x400070900060507
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2010207050b07
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4a4a25
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4a4a5c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4a4a7f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0xc
jb 0x4a4a0b
jmp 0x4a4a73
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a49c0
Function at 0x4a4aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4b86
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x51f6fbfa84206552
mov qword [rsp + 0x31], rdx
movabs rdx, 0x4402751706f50e51
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa050e020e0b0b07
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb08060e0a050e02
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd0d060904080306
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4a4b20
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x51]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4a4b52
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4a4b77
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x51]
cmp rsi, 0xf
jb 0x4a4b02
jmp 0x4a4b6b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a4aa0

Function at 0x4a4ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4d86
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8156746506249152
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xda80f80987c8156
mov qword [rsp + 0x30], rdx
movabs rdx, 0x809030202010c09
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90b080903020201
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7010d0c07010c0a
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4a4d20
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4a4d52
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a4d77
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0xe
jb 0x4a4d02
jmp 0x4a4d6b
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a4ca0
Function at 0x4a4da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4e5d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x614d29656e05656f
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xa9
movabs rdx, 0x805020802000602
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x200
xor eax, eax
nop
jmp 0x4a4e00
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4a4e2d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a4e50
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4a4de2
jmp 0x4a4e44
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a4da0

Function at 0x4a4f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5026
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x650a88a1fc949fca
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x72
movabs rdx, 0x605030605000603
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x1020403
xor eax, eax
nop
jmp 0x4a4fc0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4a4ff2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a5017
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 9
jb 0x4a4fa2
jmp 0x4a500b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a4f60

Function at 0x4a5040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a50f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb8e3df6d48db6544
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602060707070303
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x503
xor eax, eax
jmp 0x4a5098
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x6c]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x6c]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x4a50c8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4a50eb
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4a507b
jmp 0x4a50df
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.004a5040
Function at 0x4a5120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a521d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x51505b3b20406140
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3c2bfa51505b3b20
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf3586569c94f4a4d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb060c120408020e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20d081104090a00
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa07020d08110409
mov qword [rsp + 0x25], rdx
movabs rdx, 0x120004050d0c090d
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a51c0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4a51ed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a5210
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4a519f
jmp 0x4a5204
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004a5120

Function at 0x4a5240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a532c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe963fc7475a367cb
mov qword [rsp + 0x35], rdx
movabs rdx, 0xe76ecde963fc7475
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4756e2ee5b46ae61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6030c0e07110610
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf071002050d0f
mov qword [rsp + 0x25], rdx
movabs rdx, 0x8080a0312080c06
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a52ca
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a52fc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a531f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0x13
jb 0x4a52b0
jmp 0x4a5313
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a5240
Function at 0x4a5340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a542c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x896f6f63d5376f79
mov qword [rsp + 0x33], rdx
movabs rdx, 0xabc0619d75896f6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x61655f5420647261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x907030708121400
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x702090c090b0907
mov qword [rsp + 0x23], rdx
movabs rdx, 0x30c0c0b0513090c
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4a53ca
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a53fc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a541f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 0x15
jb 0x4a53b0
jmp 0x4a5413
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a5340

Function at 0x4a5440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a553b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x63c2aa239a20c11f
mov qword [rsp + 0x39], rdx
movabs rdx, 0x64bac2c553206163
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4c8ae354209c7dc2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x411150015031411
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1416040b14030d11
mov qword [rsp + 0x25], rdx
movabs rdx, 0x61500051416040b
mov qword [rsp + 0x29], rdx
movabs rdx, 0x110030b0f0c140b
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4a54d9
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4a550b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4a552e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0x17
jb 0x4a54bf
jmp 0x4a5522
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004a5440
Function at 0x4a5560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a564c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x65687f6d4f6e6169
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6a5f617453206568
mov qword [rsp + 0x38], rdx
movabs rdx, 0x777f7554202b7261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x101514051005
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x414031413060000
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc050d0206050c02
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4a55ea
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a561c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a563f
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
cmp rsi, 0x16
jb 0x4a55d0
jmp 0x4a5633
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a5560

Function at 0x4a5660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a574c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6b61696c5d602881
mov qword [rsp + 0x33], rdx
movabs rdx, 0x596e6874606b6169
mov qword [rsp + 0x38], rdx
movabs rdx, 0x531b42645564724a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa100c040003130a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x103080410100a10
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd12010211140307
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4a56ea
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x14]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a571c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a573f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x14]
cmp rsi, 0x15
jb 0x4a56d0
jmp 0x4a5733
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a5660
Function at 0x4a5760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a584c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7958ee54d5f861de
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6fe5a963ed207958
mov qword [rsp + 0x38], rdx
movabs rdx, 0xcde96954205ae461
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa02040d0506140f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x15030d100b150a02
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40203000d0c0905
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4a57ea
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a581c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a583f
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0x16
jb 0x4a57d0
jmp 0x4a5833
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004a5760

Function at 0x4a5860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a595b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72537a3a697b8f7d
mov qword [rsp + 0x35], rdx
movabs rdx, 0x7f6e6872537a3a69
mov qword [rsp + 0x38], rdx
movabs rdx, 0x714b5e8f2064ac61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80c020a0f07010c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc0f1004050105
mov qword [rsp + 0x23], rdx
movabs rdx, 0x110f000c0f100405
mov qword [rsp + 0x25], rdx
movabs rdx, 0x202020808120a10
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a58f9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a592b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a594e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0x13
jb 0x4a58df
jmp 0x4a5942
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004a5860