joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49f920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49fa0c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x996c698fc4d94b92
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x879a996c698fc4d9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4508738965636f72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1010110203070310
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x801101011020307
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9040e0700110711
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x49f9aa
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x49f9dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49f9ff
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x12
jb 0x49f990
jmp 0x49f9f3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0049f920

Function at 0x49fa20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49fb3a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x52c68c6e6d9f7f96
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc4ab7245979ca56e
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb19c75c4ab724597
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6541bdd5aabc66bd
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2020b170b161507
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1805050b180f0603
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13000c070f0a1312
mov qword [rsp + 0x48], rdx
movabs rdx, 0x51311110e091219
mov qword [rsp + 0x50], rdx
movabs rdx, 0x60e190513010903
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x49fad7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x28
jge 0x49fb09
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x49fb2d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
cmp rsi, 0x1b
jb 0x49fabd
jmp 0x49fb21
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.00441380
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00451880
mov eax, edi
mov ecx, 0x1b
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.0049fa20
Function at 0x49ff00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a001d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xb7c820bfc8d06f73
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20b15883a0d563b3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x69749c656ed612b9
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x74ada20e72bbaa6f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x15150b0e1e0d1d0d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1a0515150b0e1e0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x191c111e1b080710
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa1112031a1d0c12
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4021a1d0603191e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x49ffc0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x49ffed
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4a0010
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x20
jb 0x49ff9d
jmp 0x4a0004
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00451880
mov eax, edi
mov ecx, 0x20
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0049ff00

Function at 0x4a0380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a048c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8c637d7c6f2f659a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6f6f83649165988a
mov qword [rsp + 0x21], rdx
movabs rdx, 0xab6f6f8364916598
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8894b7a26f767c82
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x17100d1508100b16
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1817050b08091800
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2110f1612081817
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70418080d05170f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a0428
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a045c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4a047f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0x19
jb 0x4a040e
jmp 0x4a0473
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a0380
Function at 0x4a0be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a0d0c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x61e06972a6f4134e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6d5bfe726120f8
mov qword [rsp + 0x24], rdx
movabs rdx, 0xff08eef96f81a26e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf7188880d4b347f3
mov qword [rsp + 0x34], rdx
movabs rdx, 0x16021d09190d1e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x171a161c1a091c01
mov qword [rsp + 0x44], rdx
movabs rdx, 0x121e0912171a161c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e030c0319030f1f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c141c0302151109
mov qword [rsp + 0x58], rdx
movabs rdx, 0x801061b181e0316
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4a0ca6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4a0cdc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x4a0cff
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4a]
cmp rsi, 0x20
jb 0x4a0c8c
jmp 0x4a0cf3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00451880
mov eax, edi
mov ecx, 0x20
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a0be0

Function at 0x4a13e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a14bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd14a3408f06c2f05
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x43bac239312fd14a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10a08000a0b0a07
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50d0c09010a0800
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80903010b060304
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a1460
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4a148d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a14b0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4a1442
jmp 0x4a14a4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a13e0
Function at 0x4a14e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a15a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7c23367865736f7e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6e777984
movabs rdx, 0x709090501010103
mov qword [rsp + 0x28], rdx
movabs rdx, 0x505000606080604
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a1548
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4a1577
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4a159a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4a152b
jmp 0x4a158e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a14e0

Function at 0x4a1860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a194a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x908fd6748a9e4b69
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xdbc5908fd6748a9e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64c57692c565a889
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90a080305100a0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10a0e05090a0803
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100302070601020d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a18ed
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4a191a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a193d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4a18d0
jmp 0x4a1931
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a1860
Function at 0x4a2860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a295b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbbec147b323e3a69
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xce74bbec147b323e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x196f7218d700fd75
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb05040c09050d0e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb010d0409090c06
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2070b010d040909
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe1103060205060e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a28f9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a292b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a294e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x12
jb 0x4a28df
jmp 0x4a2942
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004a2860

Function at 0x4a2fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a30bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x39613e20c967c069
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3ef25f3b39613e20
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf46ca99b37d7e964
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30c0b0313030108
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70b0e05100f0f0b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x100d0b031002070b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa110e010e09020b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a3060
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4a308d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4a30b0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4a303f
jmp 0x4a30a4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a2fc0
Function at 0x4a3ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3fec
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x2d7a6f6efee0cb75
mov qword [rsp + 0x42], rdx
movabs rdx, 0x73736557c2612d7a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x74f165426e204d23
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc99ae4d768738364
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7272613862b97b20
mov qword [rsp + 0x60], rdx
movabs rdx, 0x120e071c000a1500
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1b151406021f120e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x11a091a14201a0f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x250e1c222202001d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1220170302010303
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x4a3f86
movzx r9d, byte [rsp + rsi + 0x42]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x42], dl
mov byte [rsp + rsi + 0x42], r8b
add rax, 2
cmp rax, 0x26
jge 0x4a3fbc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x26
jae 0x4a3fdf
movzx r8d, byte [rsp + rdi + 0x42]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x26
jb 0x4a3f6c
jmp 0x4a3fd3
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x26
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00451880
mov eax, edi
mov ecx, 0x26
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a3ec0
Function at 0x4a4bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4a4d32
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0xff745b626737730d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x69686d6f4052786e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x27547961205f5c69
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2a5f22616d4d54d8
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6c916737567d6816
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x166a48025272197a
mov qword [rsp + 0x46], rdx
movabs rdx, 0x2e2c2d0422192725
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x3221d09152b1c2a
mov qword [rsp + 0x56], rdx
movabs rdx, 0x140103221d09152b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x181e280923162405
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd090e1c21221d0b
mov qword [rsp + 0x68], rdx
movabs rdx, 0xa02172a2e1d2300
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2c0a1f191d02252a
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1116231810131e07
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4a4ccd
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x3a
jge 0x4a4cff
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x4a4d25
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0x2f
jb 0x4a4cb3
jmp 0x4a4d19
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2f
call fcn.00441380
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00451880
mov eax, edi
mov ecx, 0x2f
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a4bc0

Function at 0x4a4d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4e48
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x630e16f06224ad2e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9fa669f205ea6974
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb20a7494f52eaf9f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2d0d8370fd8e32fc
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0a0410020a0f1c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x121e1713150e010f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x171915181c051219
mov qword [rsp + 0x48], rdx
movabs rdx, 0x16120b061d1a1615
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a4deb
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x4a4e18
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4a4e3b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4a4dce
jmp 0x4a4e2f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00451880
mov eax, edi
mov ecx, 0x1f
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a4d40
Function at 0x4a6dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6ebb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8d4268659a74716a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x73858120738e8d42
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7b77628b71666164
mov qword [rsp + 0x26], rdx
movabs rdx, 0x150d060712030308
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x11108040014100e
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0b011108040014
mov qword [rsp + 0x38], rdx
movabs rdx, 0x812011405150c15
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a6e59
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a6e8b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a6eae
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x27]
cmp rsi, 0x16
jb 0x4a6e3f
jmp 0x4a6ea2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004a6dc0

Function at 0x4a7f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a802c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x726331206e573455
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6d726331206e5734
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7254727272203061
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc03010c05000305
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0602030f02030c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50c0a03020c0a02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a7fca
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xb]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a7ffc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a801f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xb]
cmp rsi, 0x11
jb 0x4a7fb0
jmp 0x4a8013
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a7f40
Function at 0x4a8900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a89fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x61564b05616e5b63
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5b5a4f4c6c6c6156
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1854546d655c7965
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1140b15100b0505
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0c060413010d03
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb140a0c06041301
mov qword [rsp + 0x38], rdx
movabs rdx, 0x414100f15051014
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a89a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4a89cd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a89f0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a897f
jmp 0x4a89e4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a8900

Function at 0x4a8a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8b28
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x217373acf0ac6fa3
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa9bc9b665f20b167
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6973a9bc9b665f20
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6d70dbc220646572
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7190b02090b070b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x302040d0004030d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x160f0e03070f0302
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1919021917190e09
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a8acb
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x4a8af8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a8b1b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a8aae
jmp 0x4a8b0f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a8a20