joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4819a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x481b3b
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0xe7e1fb4369660071
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2028726532f805e7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x558f5e807feff8eb
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6ff0dc7a658b146e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc79108786527e173
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6ecf46ce61546b76
mov qword [rsp + 0x42], rdx
movabs rdx, 0xdb675ef09200463
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x25322c1830123616
mov qword [rsp + 0x52], rdx
movabs rdx, 0x131717350d362532
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf091e3211151b14
mov qword [rsp + 0x60], rdx
movabs rdx, 0x15292833321c012b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x29190a2014212500
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1823242511330801
mov qword [rsp + 0x78], rdx
movabs rdx, 0x10040506172d1b
mov qword [rsp + 0x80], rdx
movabs rdx, 0x151d072607090836
mov qword [rsp + 0x88], rdx
movabs rdx, 0x303520002c142b05
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x481ad1
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x46
jge 0x481b08
movzx edx, byte [rsp + rax + 0x52]
movzx esi, byte [rsp + rax + 0x53]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x481b2e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
nop dword [rax + rax]
cmp rsi, 0x37
jb 0x481ab7
jmp 0x481b22
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x37
call fcn.0044c140
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.00461b40
mov eax, edi
mov ecx, 0x37
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.004819a0

Function at 0x487e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487f1d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x37e5dee48cdcef32
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xed92363531d78880
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa020902090e080a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3050a020902090e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10f05060e04040a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x487ec0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x487eed
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x487f10
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x487ea2
jmp 0x487f04
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.00487e40
Function at 0x48a880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a99a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1a00ff37ef37f419
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1e32380d05343435
mov qword [rsp + 0x20], rdx
movabs rdx, 0x37130cf4f2e61e32
mov qword [rsp + 0x26], rdx
movabs rdx, 0x101c1e271c371835
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x13111b03110b0c0d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1c0f13111b03110b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120b1a1d060b0b01
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131917071a100014
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd1b1a0511010b06
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x48a937
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x22
jge 0x48a969
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x48a98d
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0x1e
jb 0x48a91d
jmp 0x48a981
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.0044c140
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461b40
mov eax, edi
mov ecx, 0x1e
call fcn.00461b40
nop
call fcn.0045f8c0
nop
jmp fcn.0048a880

Function at 0x48b620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b758
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x36445137d4c0be33
mov qword [rsp + 0x18], rdx
movabs rdx, 0xcd5836445137d4c0
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb41d30b8c53030d0
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd9a4a3a535b1c268
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb8a9bc30c2b7a953
mov qword [rsp + 0x32], rdx
movabs rdx, 0x51a21031220170e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x16121b03210d1b10
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2019171d181b1612
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1171f1017061816
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f1c021314110916
mov qword [rsp + 0x58], rdx
movabs rdx, 0x60d08061a051d0a
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48b6f8
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x5a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x2e
jge 0x48b728
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x48b74b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x22
jb 0x48b6db
jmp 0x48b73f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x22
call fcn.0044c140
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00461b40
mov eax, edi
mov ecx, 0x22
call fcn.00461b40
nop
call fcn.0045f8c0
nop dword [rax]
jmp fcn.0048b620
Function at 0x4952a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x495432
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x55986e659bb79ef3
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa955986e659bb79e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2469009afe6ec1d3
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe2d32be7a7b163a3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x721a83a661627374
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa22d2d8d6ca3cef7
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x420f776f5a175627
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1d112701300d302b
mov qword [rsp + 0x4a], rdx
movabs rdx, 0xc0a030e2f031d11
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2c03141009222c00
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6260213272a2716
mov qword [rsp + 0x60], rdx
movabs rdx, 0x281b0b0a25001529
mov qword [rsp + 0x68], rdx
movabs rdx, 0x21f010617082f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x282507081e161523
mov qword [rsp + 0x78], rdx
movabs rdx, 0x210108072b00210c
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2814022718082315
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x4953d1
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x46
jge 0x4953fe
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x495425
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x31
jb 0x4953b4
jmp 0x495418
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x31
call fcn.0044c140
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x31
nop
call fcn.00461b40
mov eax, edi
mov ecx, 0x31
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004952a0
Function at 0x4959c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x495b1a
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x794b6e4520746a6e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x826e6a6963d06f81
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1f1e74855d677397
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x456476b771737497
mov qword [rsp + 0x32], rdx
movabs rdx, 0x34369347419a4672
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x205c7767825e6952
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1c0717210a061013
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2522140f07061c07
mov qword [rsp + 0x50], rdx
movabs rdx, 0x81e0f1710181f1b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d10281f1e090d23
mov qword [rsp + 0x60], rdx
movabs rdx, 0x11e0f2e2f0f2c0b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x182f2b2a1f0f1112
mov qword [rsp + 0x70], rdx
movabs rdx, 0x11081104240d1b16
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x495ab8
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x39]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x36
jge 0x495aea
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x495b0d
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x39]
cmp rsi, 0x30
jb 0x495a9e
jmp 0x495b01
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x30
call fcn.0044c140
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x30
call fcn.00461b40
mov eax, edi
mov ecx, 0x30
call fcn.00461b40
nop
call fcn.0045f8c0
nop
jmp fcn.004959c0
Function at 0x495de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x495f67
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0xad766e3c6ebdb373
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x86bcb6d0ab6eb320
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9cc5905c9fcd4143
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xcbe56aa2574f6ea5
mov qword [rsp + 0x34], rdx
movabs rdx, 0xbd61167d9890e16d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb47aaa5b28696a20
mov qword [rsp + 0x44], rdx
movabs rdx, 0x2507271904161f2d
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xd21231d25072719
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2f29152b22190729
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe21170c120b1c2f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x102f020d01021709
mov qword [rsp + 0x68], rdx
movabs rdx, 0x16131e1615181516
mov qword [rsp + 0x70], rdx
movabs rdx, 0xb1e1d27240f2d21
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1a2c2f1417032403
mov qword [rsp + 0x80], rdx
movabs rdx, 0x142c1b24100d250a
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x495f00
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x44
jge 0x495f32
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x495f5a
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0x30
jb 0x495ee5
jmp 0x495f4e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x30
nop
call fcn.0044c140
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x30
call fcn.00461b40
mov eax, edi
mov ecx, 0x30
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00495de0

Function at 0x497a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x497ad8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2f32a06f32027441
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x600050000020002
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6030507
xor eax, eax
jmp 0x497a76
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x497aa8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x497acb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 8
jb 0x497a5c
jmp 0x497abf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461b40
mov eax, edi
mov ecx, 8
call fcn.00461b40
nop
call fcn.0045f8c0
nop dword [rax]
jmp fcn.00497a20
Function at 0x497b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x497bb2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x2067cdc29a9861bf
mov qword [rsp + 0x20], rdx
movabs rdx, 0x304040502000400
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x497b51
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x497b7e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x497ba5
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x497b34
jmp 0x497b95
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044c140
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 8
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00497b00
Function at 0x4a3d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3e6c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xeead6d44bb5d72aa
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb7aba93f33bc65bd
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe6a78fe3919fa26b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140d0b140c07060b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x804140d0b140c07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x308070a0f00120e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0d0a170c161102
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150306030a130e0b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a3e08
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4a3e3c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4a3e5f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 0x18
jb 0x4a3dee
jmp 0x4a3e53
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461b40
mov eax, edi
mov ecx, 0x18
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004a3d60

Function at 0x4a5020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4a51a0
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x3a0c536580b38d72
mov qword [rsp + 0x19], rdx
movabs rdx, 0x616dae654e8d6920
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7272029687616dae
mov qword [rsp + 0x26], rdx
movabs rdx, 0xed4458d7203a986f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe274656ca862699e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x44657788de207d9f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x200d20290a19030e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x201b200d20290a19
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe031a1f1006280a
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa12211019012602
mov qword [rsp + 0x58], rdx
movabs rdx, 0x242a2c0b241c101c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x210b060d251c102a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x210b2c0b010e0326
mov qword [rsp + 0x70], rdx
movabs rdx, 0x210b191929100a28
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1d16110512280a2a
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4a5140
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x42
jge 0x4a516d
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4a5193
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x2d
jb 0x4a5122
jmp 0x4a5187
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.0044c140
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00461b40
mov eax, edi
mov ecx, 0x2d
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004a5020
Function at 0x4a82c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a83ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e3adc22ea66213c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x61562e3adc22ea66
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc4de695bd427d738
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30d0a0a06000c11
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5050b04050e0410
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30401010c0e0504
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a834a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a837c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a839f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x12
jb 0x4a8330
jmp 0x4a8393
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461b40
mov eax, edi
mov ecx, 0x12
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004a82c0
Function at 0x4aaec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aafcc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x455d7d533c857b63
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65205f5253576256
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5a4c5c7c4b6c4329
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1214020603050117
mov qword [rsp + 0x36], rdx
movabs rdx, 0x510121402060305
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1601160c0c100214
mov qword [rsp + 0x40], rdx
movabs rdx, 0x514010c150b0d05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x90a070e13040010
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4aaf68
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4aaf9c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4aafbf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x18
jb 0x4aaf4e
jmp 0x4aafb3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461b40
mov eax, edi
mov ecx, 0x18
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004aaec0

Function at 0x4aafe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x4ab11b
push rbp
mov rbp, rsp
sub rsp, 0xa8
movabs rdx, 0x3a2efd6036e765b6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9d63652680d84b20
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65c572613c2e9d63
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe165f9287c50500f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x63d26e191da06f20
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe7b03ba019ecf76e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd06115f99aecf9e3
mov qword [rsp + 0x48], rdx
movabs rdx, 0xfd3679ff356104ba
mov qword [rsp + 0x50], rdx
lea rdi, [rsp + 0x58]
lea rsi, [0x00646450]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046217a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4ab0b1
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x50
jge 0x4ab0e8
movzx edx, byte [rsp + rax + 0x58]
movzx esi, byte [rsp + rax + 0x59]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3e
jae 0x4ab10e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
nop dword [rax + rax]
cmp rsi, 0x3e
jb 0x4ab097
jmp 0x4ab102
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x3e
call fcn.0044c140
add rsp, 0xa8
pop rbp
ret
mov eax, esi
mov ecx, 0x3e
call fcn.00461b40
mov eax, edi
mov ecx, 0x3e
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.004aafe0
Function at 0x4ab420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab51b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xafc7ad97eb6602ee
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x495650d7c6176af
mov qword [rsp + 0x22], rdx
movabs rdx, 0x976bf87406360cd0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40510161103120a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd06081203030f07
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x512150604010d06
mov qword [rsp + 0x40], rdx
movabs rdx, 0x310060e14000b0f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ab4b9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4ab4eb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ab50e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4e]
cmp rsi, 0x17
jb 0x4ab49f
jmp 0x4ab502
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461b40
mov eax, edi
mov ecx, 0x17
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.004ab420

Function at 0x4abee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac00c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x5b729ba88b707872
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x617a9465505c797c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7488a66b3b659697
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x748d6c3d207c8fb9
mov qword [rsp + 0x32], rdx
movabs rdx, 0x18001a050e040515
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb1910031e111400
mov qword [rsp + 0x42], rdx
movabs rdx, 0x171918030d190b19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x81c090e13141501
mov qword [rsp + 0x50], rdx
movabs rdx, 0x41c1e16101d150c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d0a0e190e100708
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4abfa6
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2e
jge 0x4abfdc
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x4abfff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x20
jb 0x4abf8c
jmp 0x4abff3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.0044c140
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461b40
mov eax, edi
mov ecx, 0x20
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004abee0