joyce8/EMBER2024-capa huggingface dataset:
Function at 0x48e7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e8fe
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x39764f6fd8321d73
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6cf30e036c6cfb04
mov qword [rsp + 0x25], rdx
movabs rdx, 0xcd6cf30e036c6cfb
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6ec53e0565b7e145
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1f36d141f220d0c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4bf1bf622074d6bc
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x17031b160c162226
mov qword [rsp + 0x46], rdx
movabs rdx, 0x130817031b160c16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1210282701101f0e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x715111d05052812
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1091a2219021909
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1726030928101613
mov qword [rsp + 0x68], rdx
movabs rdx, 0x8210d200e1f1c09
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x48e899
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xb
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x32
jge 0x48e8ca
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x48e8f1
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xb
add r8d, edx
cmp rsi, 0x29
jb 0x48e87f
jmp 0x48e8e5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x29
call fcn.0044a0a0
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x29
call fcn.0045f380
mov eax, edi
mov ecx, 0x29
call fcn.0045f380
nop
nop
call fcn.0045cd20
jmp fcn.0048e7a0
Function at 0x48ef40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f092
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x7662873674704810
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x853a7318646f503d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x546f88853a731864
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4a6d9a66124b7236
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4b44752f8b73e520
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1d678bc38691664c
mov qword [rsp + 0x42], rdx
movabs rdx, 0x10228161a1c1a
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x21051026232a0d16
mov qword [rsp + 0x52], rdx
movabs rdx, 0x160b1e0c0b1c2105
mov qword [rsp + 0x58], rdx
movabs rdx, 0x825131213050f23
mov qword [rsp + 0x60], rdx
movabs rdx, 0x191f071622150221
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc0d0c1218011827
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x48f02d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x2e
jge 0x48f05a
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x48f085
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x2b
jb 0x48f010
jmp 0x48f075
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2b
call fcn.0044a0a0
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2b
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0x2b
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0048ef40
Function at 0x496e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x496f48
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x31fcb56cfcc66f0b
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x8bbb
movabs rdx, 0x608090906020005
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5020305
xor eax, eax
jmp 0x496ee3
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffa9
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x496f14
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x496f3b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffa9
add r8d, edx
cmp rsi, 0xa
jb 0x496ec9
jmp 0x496f2f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f380
mov eax, edi
mov ecx, 0xa
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00496e80

Function at 0x4970c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49719c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa92e65ebe0d7d042
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x72e5bce1e7dea92e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4090a010a020c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3040b030908070b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x497132
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffff80
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x497168
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49718f
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffff80
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xe
jb 0x497118
jmp 0x497183
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f380
mov eax, edi
mov ecx, 0xe
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.004970c0
Function at 0x49ffa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a00b3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe646b553ea3bda94
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd732004f2650961
mov qword [rsp + 0x22], rdx
movabs rdx, 0x14203e20650d0d73
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa29bcdb7f294a313
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc041a0c1b12161c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc021d17170c0010
mov qword [rsp + 0x40], rdx
movabs rdx, 0x171518010f09170c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1603050b19070110
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a004e
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x48
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a007f
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4a00a6
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x48
add r8d, edx
cmp rsi, 0x1e
jb 0x4a0034
jmp 0x4a009a
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f380
mov eax, edi
mov ecx, 0x1e
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0049ffa0

Function at 0x4a00c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4a0246
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xa27463298e4ed46c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x556a615374516f68
mov qword [rsp + 0x21], rdx
movabs rdx, 0xf18d656e5a556a61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3376fc602039166a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x688d2f5020444a40
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3e606d5b6031645d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1f2113031307232b
mov qword [rsp + 0x46], rdx
movabs rdx, 0x15070a25082819
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x210c0015070a2508
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf100d21150d0411
mov qword [rsp + 0x58], rdx
movabs rdx, 0x16081e0002142902
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe09231d221c150a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1a272a2908082c01
mov qword [rsp + 0x70], rdx
movabs rdx, 0x22700102c171515
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4a01d6
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffd0
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x3a
jge 0x4a0208
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4a0235
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffd0
add r8d, edx
nop
cmp rsi, 0x2d
jb 0x4a01bc
jmp 0x4a0229
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.0044a0a0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2d
call fcn.0045f380
mov eax, edi
mov ecx, 0x2d
nop dword [rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004a00c0
Function at 0x4a0360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a042b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd096ff386c666575
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], pe_nt_image_headers64
movabs rdx, 0x704060804000007
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x80506
xor eax, eax
jmp 0x4a03c4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4a03f7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x4a041e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4a03a7
jmp 0x4a0412
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f380
mov eax, edi
mov ecx, 9
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004a0360
Function at 0x4a1f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2072
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x3ab6e965ab99eeca
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x79614c636e0766e4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20dd75c679614c63
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7b6e3ae8680eb377
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2120c8fb61b23a03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20726576cdb28365
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20191d211d151b1c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x182303251a231608
mov qword [rsp + 0x50], rdx
movabs rdx, 0x202002180a01121c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x506011826150625
mov qword [rsp + 0x60], rdx
movabs rdx, 0x305100118051a00
mov qword [rsp + 0x68], rdx
movabs rdx, 0x8251e0523192127
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4a200a
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x6a
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x30
jge 0x4a203b
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x4a2065
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x6a
add r8d, edx
cmp rsi, 0x2c
jb 0x4a1ff0
jmp 0x4a2056
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x2c
call fcn.0044a0a0
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2c
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0x2c
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004a1f20
Function at 0x4a2860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4a2a1a
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
movabs rdx, 0x2639e2ecc16e2af8
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe8f7616915e93f79
mov qword [rsp + 0x22], rdx
movabs rdx, 0xef51205627ca20b5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x723f4cf9fc4467de
mov qword [rsp + 0x32], rdx
movabs rdx, 0xce7770acbfb5a325
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x815873c972c6786e
mov qword [rsp + 0x42], rdx
movabs rdx, 0xe4f15dcf61762d99
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2421121929240417
mov qword [rsp + 0x52], rdx
movabs rdx, 0x1b1230122a002634
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x341c0f31040e1b12
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1e232207222c2901
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1927050b0e031e26
mov qword [rsp + 0x70], rdx
movabs rdx, 0x16301d26372c162f
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2e192c362e100013
mov qword [rsp + 0x80], rdx
movabs rdx, 0xd372e0e3020350a
mov qword [rsp + 0x88], rdx
movabs rdx, 0x9191c18061d2e0e
mov qword [rsp + 0x90], rdx
movabs rdx, 0xb1a2a3435143524
mov qword [rsp + 0x98], rdx
xor eax, eax
jmp 0x4a29b2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x4e
jge 0x4a29df
movzx edx, byte [rsp + rax + 0x52]
movzx esi, byte [rsp + rax + 0x53]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x38
jae 0x4a2a0d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x38
jb 0x4a2995
jmp 0x4a2a01
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x38
call fcn.0044a0a0
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
nop
ret
mov eax, esi
mov ecx, 0x38
call fcn.0045f380
mov eax, edi
mov ecx, 0x38
call fcn.0045f380
nop
call fcn.0045cd20
nop
jmp fcn.004a2860
Function at 0x4a6520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6628
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc40063bb6ccb6580
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf89c9caebbc40063
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8effc4557499359f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x120d131200070602
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4000e0c0d000209
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb080c0c04000e0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140c0a0a040a0f0e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a65c0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffa5
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4a65f1
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a661b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffa5
add r8d, edx
cmp rsi, 0x15
jb 0x4a65a5
jmp 0x4a660f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004a6520

Function at 0x4a6960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6a68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9488b3699d667a8b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3c6194ba6b889488
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9a82b16c88746794
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x150b0f09150a0614
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc03130e0514070d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x80b0411030d0c03
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe01140008080c0a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a6a02
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1e
jge 0x4a6a2f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a6a5b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a69e5
jmp 0x4a6a4f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f380
mov eax, edi
mov ecx, 0x16
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004a6960
Function at 0x4a6e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x4a6fe6
sub rsp, 0xb8
mov qword [rsp + 0xb0], rbp
lea rbp, [rsp + 0xb0]
movabs rdx, 0x3a3dd11f4c66e4f5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7416652d23540e20
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5562d961f0357416
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xfa1bb82d2bdb502d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x56c312002f4a6f59
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xfcfe869e615316e
mov qword [rsp + 0x44], rdx
movabs rdx, 0x707e382c253e745c
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1949156ebf3b7095
mov qword [rsp + 0x54], rdx
movabs rdx, 0x3632030c291c3c01
mov qword [rsp + 0x5c], rdx
lea rdi, [rsp + 0x60]
lea rsi, [0x00659578]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045f99a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4a6f71
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffdf
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x54
jge 0x4a6fa8
movzx edx, byte [rsp + rax + 0x5c]
movzx esi, byte [rsp + rax + 0x5d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3e
jae 0x4a6fd5
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffdf
add r8d, edx
nop word [rax + rax]
cmp rsi, 0x3e
jb 0x4a6f57
jmp 0x4a6fc9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x3e
call fcn.0044a0a0
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov eax, esi
mov ecx, 0x3e
call fcn.0045f380
mov eax, edi
mov ecx, 0x3e
nop dword [rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004a6e80

Function at 0x4a7000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7108
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2e2663651a660572
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65c11c610c2e2663
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbe6e74c8693d20df
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30d0b0f06140113
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1306010d0b03130d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6031306010d0b03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1080f0e0a060d11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a70a0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x38
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4a70d1
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a70fb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x38
add r8d, edx
cmp rsi, 0x15
jb 0x4a7085
jmp 0x4a70ef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004a7000
Function at 0x4a9720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9852
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x2e72dc33496ee1e7
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6c3a7505d61d034b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf16522542720c0d4
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa0565742075ddc3
mov qword [rsp + 0x58], rdx
movabs rdx, 0x726f74d93865c969
mov qword [rsp + 0x60], rdx
movabs rdx, 0x181e0a130b022100
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1021051b090c0b10
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2231e17191f110d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe24150114210d00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1f0e041e111b110e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a97ef
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
cmp rax, 0x28
jge 0x4a981c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4a9845
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x28
jb 0x4a97d2
jmp 0x4a9837
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x28
call fcn.0044a0a0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x28
nop
call fcn.0045f380
mov eax, edi
mov ecx, 0x28
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004a9720
Function at 0x4abd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abe68
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x28744d6f3d643a56
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5a555628744d6f3d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x74572340462e6573
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1030f0109050f07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4100a01070f1101
mov qword [rsp + 0x36], rdx
movabs rdx, 0x504100a01070f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb00020f04070f02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4abe02
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x4abe2f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4abe5b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4abde5
jmp 0x4abe4f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f380
mov eax, edi
mov ecx, 0x13
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004abd60
Function at 0x4ad2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad396
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xeac2d8656ce4ee66
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc00a6cf205eac2d8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x72656c706df4f373
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x14050d0c01090014
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20c020c081405
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0b0714060e0b14
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ad330
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x69
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ad362
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ad389
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x69
add r8d, edx
cmp rsi, 0x15
jb 0x4ad316
nop
jmp 0x4ad37d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004ad2a0