joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b86a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b878b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x27cb1861e07318df
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf1ded11c2af56dfb
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc06050d08070a00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0e0b050c06050d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0c0c03010a0f01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b8724
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x4b8757
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4b877e
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b8707
jmp 0x4b8772
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453360
mov eax, edi
mov ecx, 0x10
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004b86a0

Function at 0x4b8b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8c2b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xa9afd966bd74bb85
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x79ea
movabs rdx, 0x105060708050101
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3080000
xor eax, eax
jmp 0x4b8bc6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4b8bf7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4b8c1e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b8ba9
jmp 0x4b8c12
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00453360
mov eax, edi
mov ecx, 0xa
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004b8b60
Function at 0x4bbbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbcc8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x937b8c7e73606c8f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5a8c65a56673a365
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2000f09040c0c05
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0e02000f09040c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa060a0705040705
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bbc61
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffde
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x12
jge 0x4bbc92
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bbcbb
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffde
add r8d, edx
cmp rsi, 0x10
jb 0x4bbc47
jmp 0x4bbcaf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453360
mov eax, edi
mov ecx, 0x10
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004bbbe0

Function at 0x4bcf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd056
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8d9c8adb43ba65cd
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc6eb9c8d9c8adb43
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6449b07365959386
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0d080405070c06
mov qword [rsp + 0x32], rdx
movabs rdx, 0x910070002020b0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70c081002020a0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bcff3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x17]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4bd022
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4bd049
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4bcfd6
nop
jmp 0x4bd03d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453360
mov eax, edi
mov ecx, 0x13
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004bcf60
Function at 0x4be440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be528
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x50674f414c743d47
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2f65546032317447
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0a080000080b00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa040f010a0a0800
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8040d0c0a05010f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4be4c1
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xfffffffc
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x14
jge 0x4be4f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4be51b
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xfffffffc
add r8d, edx
cmp rsi, 0x10
jb 0x4be4a7
jmp 0x4be50f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453360
mov eax, edi
mov ecx, 0x10
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004be440

Function at 0x4bf200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf308
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x1774291fa374d047
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8412656c16542117
mov qword [rsp + 0x26], rdx
movabs rdx, 0x33abc354055f6946
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110815120e121214
mov qword [rsp + 0x36], rdx
movabs rdx, 0x30d07010d08070b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa01030d07010d08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12071505120d0416
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bf2a2
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1a
jge 0x4bf2cf
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4bf2fb
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4bf285
jmp 0x4bf2ef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.00441820
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453360
mov eax, edi
mov ecx, 0x17
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004bf200
Function at 0x4c2e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2f36
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x3c723037bff0dd3f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x676efe3c723037bf
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf2e12356216656b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2000408070b0201
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1003040107100200
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12001103100d0f05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c2ed0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x22
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c2f02
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c2f29
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x22
add r8d, edx
cmp rsi, 0x13
jb 0x4c2eb6
nop
jmp 0x4c2f1d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453360
mov eax, edi
mov ecx, 0x13
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004c2e40

Function at 0x4c3040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3136
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc665dc13ddb86546
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe11e1f74c665dc13
mov qword [rsp + 0x22], rdx
movabs rdx, 0x733364d0c1d4936f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf0d12030a0e0707
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb100f0e03040f0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20302090e050300
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c30d3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4c3102
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c3129
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4c30b6
nop
jmp 0x4c311d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453360
mov eax, edi
mov ecx, 0x14
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004c3040
Function at 0x4c51a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c527c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1b76ef3858411afe
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf4a9431b76ef3858
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9080003050400
mov qword [rsp + 0x28], rdx
movabs rdx, 0x109070a00080005
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c5215
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4c5248
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c526f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4c51f8
jmp 0x4c5263
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453360
mov eax, edi
mov ecx, 0xb
call fcn.00453360
nop
nop dword [rax]
call fcn.00450d00
jmp fcn.004c51a0

Function at 0x4c5840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5928
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x977486c19c756567
mov qword [rsp + 0x19], rdx
movabs rdx, 0xdf8c9fa9a8977486
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7050b030c09040b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90a07050b030c09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20a0b0c0309080a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c58c1
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffd4
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x4c58f2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c591b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffd4
add r8d, edx
cmp rsi, 0xd
jb 0x4c58a7
jmp 0x4c590f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00453360
mov eax, edi
mov ecx, 0xd
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004c5840
Function at 0x4c5ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5bbc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6fbe29207074c50c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xcd6d610df5c46fbe
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50008090909050a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa04010504040d06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c5b55
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4c5b88
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c5baf
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4c5b38
jmp 0x4c5ba3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453360
mov eax, edi
mov ecx, 0xe
call fcn.00453360
nop
nop dword [rax]
call fcn.00450d00
jmp fcn.004c5ae0

Function at 0x4c7b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7c4b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x42269f1d6cd82215
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc90c886f89248242
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe07000d04080d05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe020c040a0c0e07
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0107040902060a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c7be4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x4c7c17
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4c7c3e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c7bc7
jmp 0x4c7c32
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453360
mov eax, edi
mov ecx, 0xf
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004c7b60
Function at 0x4d3980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3a52
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1d336f6561766e6d
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6b636721
movabs rdx, 0x904050500040100
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8070b0a090a0904
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d39eb
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xfffffff6
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d3a1c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4d3a45
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xfffffff6
add r8d, edx
cmp rsi, 0xc
jb 0x4d39d1
jmp 0x4d3a37
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453360
mov eax, edi
mov ecx, 0xc
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004d3980

Function at 0x4d3a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3b32
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x703368653572695c
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c5d6e3b
movabs rdx, 0x901090500010a01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x307030801090901
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d3ace
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4d3afb
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4d3b25
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d3ab1
jmp 0x4d3b16
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00453360
mov eax, edi
mov ecx, 0xc
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004d3a60
Function at 0x4d3b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3c28
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x91616c67438d7981
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5b8a6d797e6b5e91
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0c00000a000207
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80501080e0c0000
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2040901040a0d0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d3bc1
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffe2
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4d3bf2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d3c1b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffe2
add r8d, edx
cmp rsi, 0xf
jb 0x4d3ba7
jmp 0x4d3c0f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453360
mov eax, edi
mov ecx, 0xf
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004d3b40

Function at 0x4d3f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3ffc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x434a756741673852
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x49595d7261434a75
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4060c070a090307
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9090c0c010c040b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d3f92
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xfffffffe
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d3fc8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d3fef
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xfffffffe
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x4d3f78
jmp 0x4d3fe3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00453360
mov eax, edi
mov ecx, 0xd
call fcn.00453360
nop
nop dword [rax]
call fcn.00450d00
jmp fcn.004d3f20
Function at 0x4d42c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d439c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x61c3ca1ab8a465a9
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57934591bb8a61c3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50209060406080a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30c040206000900
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d4335
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4d4368
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d438f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4d4318
jmp 0x4d4383
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453360
mov eax, edi
mov ecx, 0xe
call fcn.00453360
nop
nop dword [rax]
call fcn.00450d00
jmp fcn.004d42c0

Function at 0x4d5800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d58c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6f7e9a7b80708f9e
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x95
movabs rdx, 0x805010306040700
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x707
xor eax, eax
jmp 0x4d5863
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4d5890
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d58bb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4d5846
jmp 0x4d58af
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453360
mov eax, edi
mov ecx, 9
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004d5800

Function at 0x4d5b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5be6
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x66657e6d655d4d60
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x500020001070200
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 7
xor eax, eax
nop
jmp 0x4d5b80
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4d5bad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d5bd4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x4d5b62
jmp 0x4d5bc8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00453360
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004d5b20
Function at 0x4d5c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5d08
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9f69b92aac6ee574
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe4fdbfa9f69b92a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x299cf8e775bb20d1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0505050113120b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40c011012010910
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x204130e110c040c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12031208110c0907
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5ca2
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4d5ccf
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d5cfb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d5c85
jmp 0x4d5cef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00441820
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453360
mov eax, edi
mov ecx, 0x14
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004d5c00