joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a8520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a860b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x897fda69e0f0dcdc
mov qword [rsp + 0x18], rdx
movabs rdx, 0x799e6f74631e897f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10405010608020c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x300010405010608
mov qword [rsp + 0x28], rdx
movabs rdx, 0x801070804060400
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a85a4
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x4a85d7
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4a85fe
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4a8587
jmp 0x4a85f2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453360
mov eax, edi
mov ecx, 0xe
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a8520

Function at 0x4a8940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8a2b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd773412197e3056b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xfabe72c270fca8d7
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe030e0507070302
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8090d07010e0e03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10209040b030d02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a89c4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x4a89f7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4a8a1e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4a89a7
jmp 0x4a8a12
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453360
mov eax, edi
mov ecx, 0xf
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a8940
Function at 0x4a8a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8b68
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x706839817073596d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfc77710f896a657d
mov qword [rsp + 0x21], rdx
movabs rdx, 0x796252fc77710f89
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5e586a7672653578
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe180e0e05030813
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4130b020e180e0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a0b0507000d1314
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131301180c10190f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd060f0c07190b0c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a8b00
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffdf
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4a8b31
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4a8b5b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffdf
add r8d, edx
cmp rsi, 0x1b
jb 0x4a8ae3
jmp 0x4a8b4f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00453360
mov eax, edi
mov ecx, 0x1b
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a8a40

Function at 0x4a8fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a90d2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xbe8a28137b776505
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9bb1bd0be700910
mov qword [rsp + 0x26], rdx
movabs rdx, 0x64237a16d7c7c368
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x61312020a0e0300
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb07061312020a0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x414030f0c16110e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x512090f1600080e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa16090d09131102
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a9071
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4a909e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a90c5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4a9054
jmp 0x4a90b9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441820
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00453360
mov eax, edi
mov ecx, 0x18
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a8fc0
Function at 0x4a9600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9732
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x49746f68a8a9957e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7383939bc38f4974
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa8a77d656e536120
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7e65ad9968f22064
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7a725fb9ab695420
mov qword [rsp + 0x38], rdx
movabs rdx, 0x21a150b22220b21
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90a181b08252514
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc25010a1a001b1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4210307231f101b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x80b140a1d131b07
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4a96cc
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffb7
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x28
jge 0x4a96fd
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x4a9725
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffb7
add r8d, edx
cmp rsi, 0x26
jb 0x4a96b2
jmp 0x4a9718
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.00441820
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x26
nop
call fcn.00453360
mov eax, edi
mov ecx, 0x26
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a9600

Function at 0x4a9740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9892
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xb9693bc265b5cb61
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe9ca9940b9693bc2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x81749f32cbd96a63
mov qword [rsp + 0x24], rdx
movabs rdx, 0x72d0ed6168595de1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x79727e01e4668d25
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1509211c1c090d02
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b0b20091509211c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x510140e13210114
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd21110e0b08191e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5211316091d0e1f
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf021319161d1a04
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb13071f0d100a16
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4a982a
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x61
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x34
jge 0x4a985b
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x4a9885
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x61
add r8d, edx
cmp rsi, 0x24
jb 0x4a9810
jmp 0x4a9876
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.00441820
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x24
nop dword [rax]
call fcn.00453360
mov eax, edi
mov ecx, 0x24
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004a9740
Function at 0x4aafe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab0c8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc4d98adb2dd9d723
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7331c3c6d120c4d9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30b0c03050b0204
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60c030b0c03050b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10a000109070c03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ab061
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffff8e
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x4ab092
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ab0bb
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffff8e
add r8d, edx
cmp rsi, 0xe
jb 0x4ab047
jmp 0x4ab0af
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453360
mov eax, edi
mov ecx, 0xe
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004aafe0

Function at 0x4ab3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab496
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x70f89788746c756d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1c2070f89788746c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x331cba7010d15f12
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40c0f0a10050b0a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf040610040c0f0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa1006110d090c0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ab433
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4ab462
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ab489
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4ab416
nop
jmp 0x4ab47d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00453360
mov eax, edi
mov ecx, 0x12
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004ab3a0
Function at 0x4ae2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae3b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x28202b6f206e3030
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x730763f06c6c2820
mov qword [rsp + 0x20], rdx
movabs rdx, 0x79e9436d33d420fc
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1013000c0d0e0e03
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe050a0013140311
mov qword [rsp + 0x38], rdx
movabs rdx, 0x714130014050101
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ae350
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x21
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ae382
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ae3a9
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x21
add r8d, edx
cmp rsi, 0x16
jb 0x4ae336
nop
jmp 0x4ae39d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00453360
mov eax, edi
mov ecx, 0x16
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004ae2c0

Function at 0x4ae3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae508
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x40276e585e635469
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6fc4e4316e205d69
mov qword [rsp + 0x23], rdx
movabs rdx, 0x52ff43f56e6fc4e4
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6b0a6f59434bb33e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1304030012040d0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x181610120e041718
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60c1b1109190400
mov qword [rsp + 0x48], rdx
movabs rdx, 0x71b0d0118001417
mov qword [rsp + 0x50], rdx
movabs rdx, 0x701060c15000718
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ae4a0
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xfffffff8
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4ae4d1
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ae4fb
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xfffffff8
add r8d, edx
cmp rsi, 0x1d
jb 0x4ae483
jmp 0x4ae4ef
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00453360
mov eax, edi
mov ecx, 0x1d
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004ae3e0
Function at 0x4b0500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0648
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x562b5c725564615f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7267183e6f562b5c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5c6f72717c201767
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x495c7e792a698863
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4855791320631b61
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1a1006160411061b
mov qword [rsp + 0x44], rdx
movabs rdx, 0x41f241c0909150b
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x21032118041f241c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f11191f1f02210a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40a131e0723000a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x3141621050e0318
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4b05e0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffd8
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x4b0611
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4b063b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffd8
add r8d, edx
cmp rsi, 0x25
jb 0x4b05c2
jmp 0x4b062f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x25
call fcn.00453360
mov eax, edi
mov ecx, 0x25
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004b0500

Function at 0x4b0660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0732
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6988b3ab8aaa778c
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x64ad
movabs rdx, 0x606030602080204
mov qword [rsp + 0x22], rdx
movabs rdx, 0x200040605060606
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4b06ca
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffd4
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b06fb
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b0725
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffd4
add r8d, edx
cmp rsi, 0xa
jb 0x4b06b0
jmp 0x4b0716
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00453360
mov eax, edi
mov ecx, 0xa
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004b0660
Function at 0x4b3100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b31eb
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x20d26e26851f7291
mov qword [rsp + 0x19], rdx
movabs rdx, 0x72cdf7721d20d26e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb040a040b030008
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb030b040a040b03
mov qword [rsp + 0x28], rdx
movabs rdx, 0x402020803040406
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b3184
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x4b31b7
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x4b31de
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4b3167
jmp 0x4b31d2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00453360
mov eax, edi
mov ecx, 0xd
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004b3100

Function at 0x4b3500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b35f6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x207346de651a1702
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6970207346de651a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x723b41252355434d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0b0f05100e0410
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10100a010e0b0f05
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b0c000b0d020b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b3593
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4b35c2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b35e9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b3576
nop
jmp 0x4b35dd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00453360
mov eax, edi
mov ecx, 0x12
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004b3500
Function at 0x4b3820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3952
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x796eb6ba20877eaf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xae20796eb6ba2087
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc65ba566aa4566db
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6fa19961cfc8aa73
mov qword [rsp + 0x30], rdx
movabs rdx, 0x598669bdf46c2074
mov qword [rsp + 0x38], rdx
movabs rdx, 0x131c0f040917111d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150f181e140c170a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe2018020d001117
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1110017050e0f1d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d1c0c1c0e0d2110
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4b38ec
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffb9
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x28
jge 0x4b391d
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x4b3945
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffb9
add r8d, edx
cmp rsi, 0x22
jb 0x4b38d2
jmp 0x4b3938
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
call fcn.00441820
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x22
nop
call fcn.00453360
mov eax, edi
mov ecx, 0x22
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004b3820

Function at 0x4b4840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4912
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x502c335c70477223
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c6e4c502c335c70
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x700080402090804
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9000606
xor eax, eax
jmp 0x4b48ab
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xfffffffe
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4b48dc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b4905
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xfffffffe
add r8d, edx
cmp rsi, 0xb
jb 0x4b4891
jmp 0x4b48f7
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00453360
mov eax, edi
mov ecx, 0xb
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004b4840
Function at 0x4b5520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b55fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x9290717e6865736a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c33769290717e68
mov qword [rsp + 0x20], rdx
movabs rdx, 0x704030805000907
mov qword [rsp + 0x28], rdx
movabs rdx, 0x904070409060906
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b5595
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4b55c8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b55ef
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4b5578
jmp 0x4b55e3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453360
mov eax, edi
mov ecx, 0xb
call fcn.00453360
nop
nop dword [rax]
call fcn.00450d00
jmp fcn.004b5520

Function at 0x4b71e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7308
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x86a1444382b38d8b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x83c6817265937188
mov qword [rsp + 0x24], rdx
movabs rdx, 0x748ea26f83c68172
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7b788c73b09e7664
mov qword [rsp + 0x30], rdx
movabs rdx, 0x718060201170a0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x190811101500160a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100916120a00060f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b1b09191b0d0103
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15050011140e001b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b72a0
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffffc9
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4b72d1
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4b72fb
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffffc9
add r8d, edx
cmp rsi, 0x1c
jb 0x4b7283
jmp 0x4b72ef
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453360
mov eax, edi
mov ecx, 0x1c
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004b71e0