joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4de580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de688
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x745393c6b7be6170
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5f7561745393c6b7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x65937a8b206472a8
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa031010040f020f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0b080a05031108
mov qword [rsp + 0x34], rdx
movabs rdx, 0x110f0f0f0f0b080a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x808001004090b03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4de620
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffd1
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4de651
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4de67b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffd1
add r8d, edx
cmp rsi, 0x13
jb 0x4de605
jmp 0x4de66f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453360
mov eax, edi
mov ecx, 0x13
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004de580

Function at 0x4de6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de7a6
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x104f694e15496160
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3146115a53124153
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3b16105420f77261
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40d0417150d030c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0a060f040f000c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x41516020a0a060f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120200000e040712
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4de740
movzx r9d, byte [rsp + rsi + 0x1c]
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax + rax]
cmp rax, 0x1c
jge 0x4de76d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4de794
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, edx
cmp rsi, 0x18
jb 0x4de725
jmp 0x4de788
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441820
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00453360
mov eax, edi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004de6a0
Function at 0x4df180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df276
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x74be20a9b500d889
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x64bae074be20a9b5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30432b8e90649fd4
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2040b121004060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20b080209090403
mov qword [rsp + 0x38], rdx
movabs rdx, 0x212110e000f0102
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4df210
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffaa
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4df242
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4df269
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffaa
add r8d, edx
cmp rsi, 0x13
jb 0x4df1f6
nop
jmp 0x4df25d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453360
mov eax, edi
mov ecx, 0x13
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004df180

Function at 0x4dfac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dfbb6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x263d0c62eed17a40
mov qword [rsp + 0x30], rdx
movabs rdx, 0x64d2613225bf6e61
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6539264420337217
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2020e1607020e02
mov qword [rsp + 0x18], rdx
movabs rdx, 0x14160a050007100b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x15120c061505030a
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4dfb50
movzx r9d, byte [rsp + rsi + 0x30]
add r9d, 0x19
add edx, r9d
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4dfb82
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4dfba9
movzx r8d, byte [rsp + rdi + 0x30]
add r8d, 0x19
add r8d, edx
cmp rsi, 0x18
jb 0x4dfb36
nop
jmp 0x4dfb9d
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x18
call fcn.00453360
mov eax, edi
mov ecx, 0x18
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004dfac0
Function at 0x4dfbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dfcd6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xd6d01e6961d020e5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x646035d6d01e6961
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc96dd525246447b6
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc09020e00120510
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7060b010109070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1208070b000f0f0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dfc73
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4dfca2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dfcc9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4dfc56
nop
jmp 0x4dfcbd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453360
mov eax, edi
mov ecx, 0x13
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004dfbe0
Function at 0x4e2fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e30c8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x20c561e9cb673ede
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5a6e6155ec20c561
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65cf56d1bddbb9c4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30f061111110c08
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x121201130409010f
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf12121201130409
mov qword [rsp + 0x38], rdx
movabs rdx, 0x604080d0f10000e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e3060
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x74
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4e3091
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e30bb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x74
add r8d, edx
cmp rsi, 0x15
jb 0x4e3045
jmp 0x4e30af
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453360
mov eax, edi
mov ecx, 0x15
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004e2fc0
Function at 0x4e4860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4968
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xdc2cf3a52e6f6547
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd8df10daa220dc2c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3b246954e764ce0c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7090e14080f0e0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x315091109040a0a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70c031509110904
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7060b090c0a050c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e4902
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x4e492f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e495b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4e48e5
jmp 0x4e494f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00453360
mov eax, edi
mov ecx, 0x16
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004e4860

Function at 0x4e4980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4a76
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xda74e115ddb12687
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x36c4da74e115ddb1
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65ce4b54d6b68461
mov qword [rsp + 0x28], rdx
movabs rdx, 0x501071000090c0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4010d0b02050509
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30f000108050f05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e4a13
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4e4a42
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e4a69
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4e49f6
nop
jmp 0x4e4a5d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00453360
mov eax, edi
mov ecx, 0x12
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004e4980
Function at 0x4e4aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4ba8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xfd2820e6e42b0ce9
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe23e18fd2820e6e4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3e6d691f3be031ec
mov qword [rsp + 0x26], rdx
movabs rdx, 0x601070d0c120400
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3070d0f0a080b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9070003070d0f0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf00040e02080409
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e4b42
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x4e4b6f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e4b9b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4e4b25
jmp 0x4e4b8f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453360
mov eax, edi
mov ecx, 0x13
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004e4aa0

Function at 0x4e69e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6b08
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x766e654393647e31
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x87206557956e5c79
mov qword [rsp + 0x22], rdx
movabs rdx, 0x646e778487206557
mov qword [rsp + 0x26], rdx
movabs rdx, 0x72909447972f5866
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x17001a1908031109
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb1417001a190803
mov qword [rsp + 0x38], rdx
movabs rdx, 0x180b0f0a140f1110
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1507021b0115160d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1403101401000b0d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e6aa0
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffd2
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4e6ad1
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4e6afb
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffd2
add r8d, edx
cmp rsi, 0x1c
jb 0x4e6a83
jmp 0x4e6aef
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453360
mov eax, edi
mov ecx, 0x1c
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004e69e0
Function at 0x4e8040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8166
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x54161724d221f1a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x38203070505c4f55
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3751494b38203070
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6561692ffa49720c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x206140d09170b12
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0f0206140d0917
mov qword [rsp + 0x38], rdx
movabs rdx, 0x303000001101709
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16111a0a18100806
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1408101607071310
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e8100
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x22
jge 0x4e812d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4e8154
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4e80e3
jmp 0x4e8148
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00441820
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453360
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004e8040
Function at 0x4e8d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8df6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xbc6174531630fa46
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3dbc6174531630fa
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x658a0243e064b725
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70f03010e0c0d09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf080e010807070f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf01030d02080a0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e8d90
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x1a
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e8dc2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4e8de9
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x1a
add r8d, edx
cmp rsi, 0x11
jb 0x4e8d76
nop
jmp 0x4e8ddd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441820
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453360
mov eax, edi
mov ecx, 0x11
call fcn.00453360
nop
call fcn.00450d00
nop dword [rax + rax]
jmp fcn.004e8d00

Function at 0x4e98c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e99c8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x37696f5347734b05
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646a61744437696f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3a422ef94c586661
mov qword [rsp + 0x26], rdx
movabs rdx, 0x311071000130106
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0b010106021307
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14000e0b01010602
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20f081201041003
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e9960
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xfffffff5
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4e9991
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e99bb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xfffffff5
add r8d, edx
cmp rsi, 0x15
jb 0x4e9945
jmp 0x4e99af
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453360
mov eax, edi
mov ecx, 0x15
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004e98c0
Function at 0x4f4b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4beb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x414b03706176647d
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6ce1e8
movabs rdx, 0x7060008090709
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x6050b
xor eax, eax
jmp 0x4f4b87
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4f4bb7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x4f4bde
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f4b6a
jmp 0x4f4bd2
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.00453360
mov eax, edi
mov ecx, 0xc
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004f4b20

Function at 0x4f5340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5408
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x37ff56587061503b
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x57
movabs rdx, 0x500080104070600
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x406
xor eax, eax
jmp 0x4f53a0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xf
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x4f53d1
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4f53fb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xf
add r8d, edx
cmp rsi, 9
jb 0x4f5386
jmp 0x4f53ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453360
mov eax, edi
mov ecx, 9
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004f5340
Function at 0x4f65a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f667c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xdf49df546e46d949
mov qword [rsp + 0x19], rdx
movabs rdx, 0xdbc0cd4454d961df
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd090707060b0d00
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5060c0e010b020c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f6612
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff82
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4f6648
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f666f
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff82
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xf
jb 0x4f65f8
jmp 0x4f6663
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441820
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453360
mov eax, edi
mov ecx, 0xf
call fcn.00453360
nop
nop dword [rax]
call fcn.00450d00
jmp fcn.004f65a0

Function at 0x4f7320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7446
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xb12a6cd436056547
mov qword [rsp + 0x18], rdx
movabs rdx, 0x69b7616d72a25b57
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2de86e2969b7616d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xfb450a6c9c546153
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8131b1908080702
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1219191608131b19
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe09121914191304
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b10031703100a07
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0812060312060e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f73e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x24
jge 0x4f740d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4f7434
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4f73c3
jmp 0x4f7428
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.00441820
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453360
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004f7320
Function at 0x4f7460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7573
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x47615e31624e5c37
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x49484969514a612c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x5749484969514a61
mov qword [rsp + 0x24], rdx
movabs rdx, 0x42394d6d50614858
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50c080710180f05
mov qword [rsp + 0x34], rdx
movabs rdx, 0x170e02130403160b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11150a14170e0213
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10d0f0e03000701
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f750e
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xfffffff6
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4f753f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f7566
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xfffffff6
add r8d, edx
cmp rsi, 0x19
jb 0x4f74f4
jmp 0x4f755a
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441820
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00453360
mov eax, edi
mov ecx, 0x19
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004f7460

Function at 0x4f7580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f764b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xcf3a35466b31af2e
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7845
movabs rdx, 0x507000106020500
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x602
xor eax, eax
jmp 0x4f75e5
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xa
jge 0x4f7617
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xa
jae 0x4f763e
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4f75c8
jmp 0x4f7632
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00441820
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00453360
mov eax, edi
mov ecx, 0xa
call fcn.00453360
nop
call fcn.00450d00
jmp fcn.004f7580