joyce8/EMBER2024-capa huggingface dataset:
Function at 0x499e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499f2c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x206b726f40745e52
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x287201206b726f40
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6e6f5d76325a6f5f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x206e6f545d294722
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4f65f15b726c3c47
mov qword [rsp + 0x58], rdx
movabs rdx, 0x22011b200d060f0e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb13061c22011b20
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa1f1d1b08140c03
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1c16140c140b0010
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xb0806170b15171f
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x499ec6
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x24
jge 0x499efc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x23
jae 0x499f1f
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
cmp rsi, 0x23
jb 0x499eac
jmp 0x499f13
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x23
call fcn.00448840
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.0045b700
mov eax, edi
mov ecx, 0x23
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.00499e00

Function at 0x49da60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49db5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1b17697463cd1fbe
mov qword [rsp + 0x38], rdx
movabs rdx, 0xcc117933746f6e0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x25da156c1ed4de6c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0d0712020e1400
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x60d0c1100080c16
mov qword [rsp + 0x24], rdx
movabs rdx, 0x16060f08060d0c11
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1715160e01071314
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49db00
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x49db2d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49db50
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x49dadf
jmp 0x49db44
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00448840
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045b700
mov eax, edi
mov ecx, 0x18
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.0049da60
Function at 0x49e3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e49b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72af74866590a39a
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6d858b72af748665
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1722709065a7ad95
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9010b0b0d080608
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8020000090f040c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x91108020000090f
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa080c000d12040a
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x49e439
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x49e46b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49e48e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0x13
jb 0x49e41f
jmp 0x49e482
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045b700
mov eax, edi
mov ecx, 0x13
call fcn.0045b700
nop
nop dword [rax + rax]
call fcn.00459420
jmp fcn.0049e3a0

Function at 0x4a0f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a107b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa6ab74ae2265e4a6
mov qword [rsp + 0x39], rdx
movabs rdx, 0x73e3af5ae4a96ea6
mov qword [rsp + 0x40], rdx
movabs rdx, 0xbd9bdb72b2b195a9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40a0f1416120603
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf0610040d030c01
mov qword [rsp + 0x27], rdx
movabs rdx, 0x110f0f0610040d03
mov qword [rsp + 0x29], rdx
movabs rdx, 0x90b07000f15030c
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4a1019
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a104b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4a106e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0x17
jb 0x4a0fff
jmp 0x4a1062
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00448840
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045b700
mov eax, edi
mov ecx, 0x17
call fcn.0045b700
nop
nop dword [rax + rax]
call fcn.00459420
jmp fcn.004a0f80
Function at 0x4a77a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a786c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb070b3b5ada9e59f
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6c6cef28
movabs rdx, 0x809070304010509
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x504000209000809
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4a7805
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x4a783c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4a785f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0xc
jb 0x4a77eb
jmp 0x4a7853
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00448840
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045b700
mov eax, edi
mov ecx, 0xc
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004a77a0

Function at 0x4a8da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8e9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xfcc4b72f7611c943
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x536749690935fcc4
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb7076f53abb66406
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1515021402090b0e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1011100801060b07
mov qword [rsp + 0x24], rdx
movabs rdx, 0x110e0b0413041011
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x911090b11130205
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4a8e39
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a8e6b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a8e8e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x16
jb 0x4a8e1f
jmp 0x4a8e82
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00448840
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045b700
mov eax, edi
mov ecx, 0x16
call fcn.0045b700
nop
nop dword [rax + rax]
call fcn.00459420
jmp fcn.004a8da0
Function at 0x4a9280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9346
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2c0006654cf36547
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x648ce868
movabs rdx, 0xa02070507060706
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x2020609
xor eax, eax
jmp 0x4a92e0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4a9312
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4a9337
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0xc
jb 0x4a92c4
jmp 0x4a932b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045b700
mov eax, edi
mov ecx, 0xc
nop
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004a9280

Function at 0x4aacc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aad9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x799885f889679752
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9379e34bb2b8a049
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4090d040a03060a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0b04090d040a03
mov qword [rsp + 0x20], rdx
movabs rdx, 0x601010d0f05090b
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4aad40
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4aad6d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4aad90
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4aad22
jmp 0x4aad84
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00448840
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045b700
mov eax, edi
mov ecx, 0x10
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004aacc0
Function at 0x4ab060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab17d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xbfaec2bf74b70043
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb9a5cf6669749bc7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x78be9eb3b2ecc441
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20859574e6ce5474
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd0d06150d1a0810
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x12080d0d06150d1a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x71a090e1f0e1e1b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x81601080410051e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1d120f0902111314
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ab120
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4ab14d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4ab170
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x20
jb 0x4ab0fd
jmp 0x4ab164
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.00448840
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045b700
mov eax, edi
mov ecx, 0x20
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004ab060

Function at 0x4ae060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae14c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x71d96365cc3a3244
mov qword [rsp + 0x37], rdx
movabs rdx, 0x1971d96365cc3a32
mov qword [rsp + 0x38], rdx
movabs rdx, 0x67d472467bc628d1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x908070c020a010f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20f07060c0c0c10
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb0a09090603100c
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4ae0ea
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ae11c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ae13f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x74]
cmp rsi, 0x11
jb 0x4ae0d0
jmp 0x4ae133
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045b700
mov eax, edi
mov ecx, 0x11
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004ae060
Function at 0x4b0e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0ebe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbeaf9074e16c6500
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x574a06be
movabs rdx, 0x506030008070309
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x3070900
xor eax, eax
jmp 0x4b0e61
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4b0e8e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b0eb1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b0e44
jmp 0x4b0ea5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045b700
mov eax, edi
mov ecx, 0xb
call fcn.0045b700
nop
nop
call fcn.00459420
jmp fcn.004b0e00

Function at 0x4b0ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b100c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x722fe7740cfefc6a
mov qword [rsp + 0x43], rdx
movabs rdx, 0x820eadae08adc96f
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x93de737441820ead
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8273058b65fd7562
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd1401060a0c031c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x141c191c0d0e0919
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd12141c191c0d0e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1702171a00190f01
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x130d0e010a020b0c
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1405090301190f12
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4b0fa6
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4b0fdc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x4b0fff
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0x1d
jb 0x4b0f8c
jmp 0x4b0ff3
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00448840
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045b700
mov eax, edi
mov ecx, 0x1d
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004b0ee0
Function at 0x4b2900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b29e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x44e66d6f0b4a9a08
mov qword [rsp + 0x31], rdx
movabs rdx, 0x367f6e36e8051f44
mov qword [rsp + 0x38], rdx
movabs rdx, 0x202070609030d01
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa070301090b0202
mov qword [rsp + 0x21], rdx
movabs rdx, 0x3070d0d030e08
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4b2980
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4b29b2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b29d7
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0xf
jb 0x4b2962
jmp 0x4b29cb
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00448840
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045b700
mov eax, edi
mov ecx, 0xf
nop
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004b2900

Function at 0x4b2f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b305d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc6ccab75eaa2f68c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe18a72a6c6ccab75
mov qword [rsp + 0x38], rdx
movabs rdx, 0x77f1726f90786572
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1030302130a0b12
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x608020200090007
mov qword [rsp + 0x22], rdx
movabs rdx, 0x30e060802020009
mov qword [rsp + 0x24], rdx
movabs rdx, 0x205120b0f0e0808
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4b3000
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4b302d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b3050
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4b2fdf
jmp 0x4b3044
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045b700
mov eax, edi
mov ecx, 0x14
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004b2f60
Function at 0x4b5040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b515d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf33971af91765f2
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xee20286e6da1160c
mov qword [rsp + 0x47], rdx
movabs rdx, 0x1fee20286e6da116
mov qword [rsp + 0x48], rdx
movabs rdx, 0x127511ab74fd6e12
mov qword [rsp + 0x50], rdx
movabs rdx, 0x40e0315060c070d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7040e0315060c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc051113110d0e0f
mov qword [rsp + 0x27], rdx
movabs rdx, 0x100a050f09061816
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x20304021000080c
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4b5100
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4b512d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4b5150
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4b50dd
jmp 0x4b5144
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00448840
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045b700
mov eax, edi
mov ecx, 0x19
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004b5040

Function at 0x4b5da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5e5d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3e410a341c746547
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x9845
movabs rdx, 0x704030308060709
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x5040405
xor eax, eax
jmp 0x4b5e00
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x4b5e2d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b5e50
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b5de3
jmp 0x4b5e44
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045b700
mov eax, edi
mov ecx, 0xa
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004b5da0
Function at 0x4b7580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b767d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7a72694464fa6503
mov qword [rsp + 0x33], rdx
movabs rdx, 0x798cf30e8a7a7269
mov qword [rsp + 0x38], rdx
movabs rdx, 0x391065990a61fe31
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9100b09140d0b13
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1411020a0a071308
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd0d1411020a0a07
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd13140e0011110b
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4b7620
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4b764d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b7670
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4b75ff
jmp 0x4b7664
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045b700
mov eax, edi
mov ecx, 0x15
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004b7580

Function at 0x4b97e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b98cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x52546e6155744059
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3d35606752546e61
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6e3f6974436d5a40
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60b000f030c0f12
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10c120609030901
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1207080d0b0f120a
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4b986a
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b989c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b98bf
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x14
jb 0x4b9850
jmp 0x4b98b3
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045b700
mov eax, edi
mov ecx, 0x14
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004b97e0