joyce8/EMBER2024-capa huggingface dataset:
Function at 0x494a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x494ba7
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0xba742ee0b47a343f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x385367d6216cce56
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1fc93ac2e1d73853
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf40434a11a626c6c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x357a4a526f297865
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x736425d987629a9c
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2172b0c03110226
mov qword [rsp + 0x4a], rdx
movabs rdx, 0xc010c02050b0f23
mov qword [rsp + 0x52], rdx
movabs rdx, 0x231c121d1d250c01
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3140020271a1c14
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1a24090524121a22
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf04292a180c101b
mov qword [rsp + 0x70], rdx
movabs rdx, 0xd0d27100c0b152a
mov qword [rsp + 0x78], rdx
movabs rdx, 0x17120d0019260720
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x494b40
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x494b6d
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2e
jae 0x494b9a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x2e
jb 0x494b1f
jmp 0x494b8e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x2e
call fcn.00441100
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2e
call fcn.00452c00
mov eax, edi
mov ecx, 0x2e
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.00494a20
Function at 0x494bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x494d76
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0x14741e026c663872
mov qword [rsp + 0x18], rdx
movabs rdx, 0x74d66533663b722f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2109e23f58b974d6
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9565623ef66f262e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x69323cf4f36e82fc
mov qword [rsp + 0x36], rdx
movabs rdx, 0x402000c5ee29e22b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1a1ded681117214c
mov qword [rsp + 0x46], rdx
movabs rdx, 0xa65746ea16f70ae
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x300c1f1d302e1434
mov qword [rsp + 0x56], rdx
movabs rdx, 0x3110300c1f1d302e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x191f393613071731
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc0e1d2d35282a21
mov qword [rsp + 0x68], rdx
movabs rdx, 0x82b2d272901392f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1a2a0515233d2208
mov qword [rsp + 0x78], rdx
movabs rdx, 0x23112433361e2f15
mov qword [rsp + 0x80], rdx
movabs rdx, 0x10042d1b26102a1f
mov qword [rsp + 0x88], rdx
movabs rdx, 0xc0c0e1b0e01120a
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x494d0f
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x42
jge 0x494d3c
movzx edx, byte [rsp + rax + 0x56]
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3e
jae 0x494d69
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x3e
jb 0x494cf2
jmp 0x494d5d
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x3e
call fcn.00441100
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x3e
call fcn.00452c00
mov eax, edi
mov ecx, 0x3e
call fcn.00452c00
nop
call fcn.004505a0
nop dword [rax + rax]
jmp fcn.00494bc0
Function at 0x4950a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4951a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x787fe1a4bbc26572
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfbf758ea8d878
mov qword [rsp + 0x20], rdx
movabs rdx, 0x496fec7435796d3b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x16140c0c020f1205
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9040607070d0302
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14110e1103080805
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1405120f0f110a16
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x495140
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x495172
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x49519b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 0x17
jb 0x495125
jmp 0x49518f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00452c00
mov eax, edi
mov ecx, 0x17
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004950a0

Function at 0x4951c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x495327
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
movabs rdx, 0x2e722e74bc6661f1
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6c89632074789fc2
mov qword [rsp + 0x23], rdx
movabs rdx, 0xebd4e565b66c8963
mov qword [rsp + 0x28], rdx
movabs rdx, 0x95b12e206e61206e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7a99c07c2998972
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc388cc6f3f34483f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x66a67368c2746fba
mov qword [rsp + 0x48], rdx
movabs rdx, 0x88f9a1616b97cce5
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe320b37ee249e063
mov qword [rsp + 0x58], rdx
movabs rdx, 0x8ff4b8a25673f936
mov qword [rsp + 0x60], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00550b60]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045320c
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4952c0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x60
jge 0x4952ed
movzx edx, byte [rsp + rax + 0x68]
movzx esi, byte [rsp + rax + 0x69]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x4d
jae 0x49531a
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x4d
jb 0x49529f
jmp 0x49530e
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x4d
call fcn.00441100
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
mov eax, esi
mov ecx, 0x4d
call fcn.00452c00
mov eax, edi
mov ecx, 0x4d
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004951c0
Function at 0x498d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498e46
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xcdc0631c6c17d9fc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20cdc0631c6c17d9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e69c3141dab6974
mov qword [rsp + 0x26], rdx
movabs rdx, 0x437675167ab62064
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2667f0fd5c015a6f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x131b1c170d000c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x714071813091d1e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x2000071407181309
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd1b0b091b0e091a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b13140701180b1a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40212150b090604
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x498de0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x498e0d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x498e34
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x21
jb 0x498dc2
jmp 0x498e28
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.00441100
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00452c00
mov eax, edi
mov ecx, 0x21
nop dword [rax + rax]
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.00498d00
Function at 0x49a8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x49aa16
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xd763d0bf11937163
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x746e696f1d3662c8
mov qword [rsp + 0x27], rdx
movabs rdx, 0x65746e696f1d3662
mov qword [rsp + 0x28], rdx
movabs rdx, 0x402078ab2697d182
mov qword [rsp + 0x30], rdx
movabs rdx, 0xde6e6931de17a249
mov qword [rsp + 0x38], rdx
movabs rdx, 0x521108e356204711
mov qword [rsp + 0x40], rdx
movabs rdx, 0x210a091521010a16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18140b1305121d1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x926260228151612
mov qword [rsp + 0x58], rdx
movabs rdx, 0x307151222141714
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d251b0815042721
mov qword [rsp + 0x68], rdx
movabs rdx, 0x11081c2019202528
mov qword [rsp + 0x70], rdx
movabs rdx, 0x28140811220b2517
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x49a9a7
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x38
jge 0x49a9dc
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x29
jae 0x49aa09
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x29
jb 0x49a98d
jmp 0x49a9fd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x29
call fcn.00441100
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x29
call fcn.00452c00
mov eax, edi
mov ecx, 0x29
call fcn.00452c00
nop
call fcn.004505a0
nop dword [rax + rax]
jmp fcn.0049a8a0

Function at 0x49f260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f35c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa4ad73d6b3726508
mov qword [rsp + 0x19], rdx
movabs rdx, 0x87a4ad73d6b37265
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd18b6994aa6498ae
mov qword [rsp + 0x22], rdx
movabs rdx, 0x710030609000f00
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf070704090c0710
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70d0a080a0c0810
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49f2f0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x49f328
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x49f34f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x49f2d6
jmp 0x49f343
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452c00
mov eax, edi
mov ecx, 0x11
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.0049f260
Function at 0x49f380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f476
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xad00b4d665b8bb66
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x648965ad00b4d665
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb11bbeb9b2cc237d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50709070d101211
mov qword [rsp + 0x32], rdx
movabs rdx, 0x50e060f06050507
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40b0201120e0c0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49f413
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x3a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x3a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x49f442
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49f469
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x49f3f6
nop
jmp 0x49f45d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441100
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00452c00
mov eax, edi
mov ecx, 0x13
call fcn.00452c00
nop
call fcn.004505a0
nop dword [rax + rax]
jmp fcn.0049f380

Function at 0x4a1f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2028
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xcbc2b3ba666fc4be
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc20c2b35c45b720
mov qword [rsp + 0x22], rdx
movabs rdx, 0x56f69c3c0c26306
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1710030e0912050a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x140f0c050f041306
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc010b0c0d04140f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100100317071014
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a1fc2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1e
jge 0x4a1fef
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a201b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x4a1fa5
jmp 0x4a200f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00452c00
mov eax, edi
mov ecx, 0x18
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004a1f20
Function at 0x4a3160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3268
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x303402c536079ae8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf9319ea5c12e3034
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2fb2ebb2e30ccc2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0a0a020b0a140d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x120a150000010904
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x150b040f120a1500
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4050a150509090e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a3202
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1c
jge 0x4a322f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a325b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a31e5
jmp 0x4a324f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00452c00
mov eax, edi
mov ecx, 0x16
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004a3160

Function at 0x4a3a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3b88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x2073bf07b24af9a4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc661da046f612073
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc1f9f1b1a3e12379
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x15150a0d02120105
mov qword [rsp + 0x32], rdx
movabs rdx, 0x13140411090f0f04
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10130315121314
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15140d05050b0011
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a3b20
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4a3b52
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a3b7b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 0x16
jb 0x4a3b05
jmp 0x4a3b6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00452c00
mov eax, edi
mov ecx, 0x16
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004a3a80
Function at 0x4a54a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a55c6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x3165cb52526c1a0f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe716597441296cf7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x62fe6409e7165974
mov qword [rsp + 0x28], rdx
movabs rdx, 0x416a3d7473205e15
mov qword [rsp + 0x30], rdx
movabs rdx, 0x141205140f0f0e08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe1101000b050a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1114071b03190410
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30703011b1b0008
mov qword [rsp + 0x50], rdx
movabs rdx, 0x151b0a0d14111a09
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a5560
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x28
jge 0x4a558d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4a55b4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4a5543
jmp 0x4a55a8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00441100
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00452c00
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004a54a0

Function at 0x4a7140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7268
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x748c6ef9eff482a5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x86fceb03106e6f93
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe2731cb086fceb03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6465728f0204283b
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe01001014100418
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x16040f0b17100e01
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1414150600080c02
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40c1517110d0613
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4150b0d0c0e0300
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a7200
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x4a7232
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4a725b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0x1c
jb 0x4a71e3
jmp 0x4a724f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
nop
call fcn.00441100
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00452c00
mov eax, edi
mov ecx, 0x1c
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004a7140
Function at 0x4a7e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7f32
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x72eaee70749b6100
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6defed72eaee7074
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x204020a05080203
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9000602
xor eax, eax
jmp 0x4a7ece
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4a7efb
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4a7f25
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4a7eb1
jmp 0x4a7f16
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00452c00
mov eax, edi
mov ecx, 0xb
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004a7e60

Function at 0x4a83a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a849c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6953502f47656457
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x44606953502f4765
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64e4760a48507245
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0a0d0e100904
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10090104000d0a0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0e050608090c03
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a8430
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x4a8468
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a848f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x4a8416
jmp 0x4a8483
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00452c00
mov eax, edi
mov ecx, 0x12
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.004a83a0
Function at 0x4a98c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a99bc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x23a26e5d3be3731f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7420646523a26e5d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65956966e0977097
mov qword [rsp + 0x38], rdx
movabs rdx, 0x702070f02000307
mov qword [rsp + 0x18], rdx
movabs rdx, 0x204030c0702070f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf0c120706000c0e
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4a9950
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x4a9988
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4a99af
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x4a9936
jmp 0x4a99a3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x14
call fcn.00452c00
mov eax, edi
mov ecx, 0x14
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.004a98c0

Function at 0x4abd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abe68
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x597c714f67566f74
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2b597c714f67566f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6920697d27687d58
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6c613d5a79461866
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2c6b72406c2b4d7d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60d19151b081517
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc1304120c03170d
mov qword [rsp + 0x46], rdx
movabs rdx, 0x4120c1304120c03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x219100a1e130e0a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20161d0d0b0a1d0c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40905071d020c1a
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4abe00
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x20]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2a
jge 0x4abe32
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4abe5b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x20]
cmp rsi, 0x21
jb 0x4abde2
jmp 0x4abe4f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
nop
call fcn.00441100
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00452c00
mov eax, edi
mov ecx, 0x21
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004abd20