joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b6140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6266
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xff724a0a65613e6e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x756c66736531576c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x58623880f1756c66
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xff4c6e6172677156
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1304101c0501071b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1215140b0a091304
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf12021b150d1c09
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14040613130b1702
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa1114160b16140d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b6200
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x26
jge 0x4b622d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4b6254
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4b61e3
jmp 0x4b6248
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.004418e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00453440
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b6140

Function at 0x4b65e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b66cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x697df22565fe62f7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf674796d7372732c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf080a090b06040d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5000f080a090b06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b020a090d060f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b6664
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4b6697
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4b66be
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b6647
jmp 0x4b66b2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453440
mov eax, edi
mov ecx, 0x10
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b65e0
Function at 0x4beb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bec68
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8a78634f745b6e49
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x584c7d538a78634f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706f5d457467664f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0012020b0a0711
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6090d0511090c0c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1006090d051109
mov qword [rsp + 0x38], rdx
movabs rdx, 0x701130b13060211
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bec02
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1a
jge 0x4bec2f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bec5b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4bebe5
jmp 0x4bec4f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453440
mov eax, edi
mov ecx, 0x14
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004beb60

Function at 0x4c1840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1912
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x1d2f2fc7497787c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x71b6501d2f2fc74
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0a0902040200
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5070006
xor eax, eax
jmp 0x4c18ab
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4c18dd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c1905
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0xb
jb 0x4c1891
jmp 0x4c18f8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c1840
Function at 0x4c1d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1e68
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd49a56a1cba9a4e0
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe36ce791fb4f80d4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8000a07040e0c01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8030a0608000a07
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb010b0701020804
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c1e01
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4c1e33
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c1e5b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0xf
jb 0x4c1de7
jmp 0x4c1e4f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453440
mov eax, edi
mov ecx, 0xf
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c1d80

Function at 0x4c28e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c29dc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xfb28d308e674cdcc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1517ac0ffb28d308
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf72f721226eb6512
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7080700060f0105
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe1301010b121009
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc050a0304100b0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c2970
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c29a8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c29cf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x4c2956
jmp 0x4c29c3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453440
mov eax, edi
mov ecx, 0x14
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004c28e0
Function at 0x4c4500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c45eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x697261ac82745575
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8587618f7f707569
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40e030d0c00010a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe07040e030d0c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x303070b03010000
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c4584
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 1]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 1]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x4c45b7
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4c45de
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c4567
jmp 0x4c45d2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453440
mov eax, edi
mov ecx, 0xf
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c4500

Function at 0x4c5540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5612
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xfae01c3f2ed4fced
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x2e797261
movabs rdx, 0x3040603050b0401
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7020700070304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c55ab
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c55dd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c5605
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0xc
jb 0x4c5591
jmp 0x4c55f8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c5540
Function at 0x4c5620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c56e8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7a7202e3fb346f03
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xf7
movabs rdx, 0x205050703080702
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x400
xor eax, eax
jmp 0x4c5680
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x4c56b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c56db
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 9
jb 0x4c5666
jmp 0x4c56cf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453440
mov eax, edi
mov ecx, 9
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c5620

Function at 0x4c9720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c980b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4772523e5522655a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5d2749594c2c4772
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50c080a0404020a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90d050c080a0404
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8000508080b0d04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c97a4
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x4c97d7
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4c97fe
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4c9787
jmp 0x4c97f2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453440
mov eax, edi
mov ecx, 0xe
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c9720
Function at 0x4ca920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca9f2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5661e7c284e22042
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xdcc9
movabs rdx, 0x403000407010300
mov qword [rsp + 0x22], rdx
movabs rdx, 0x207080109050403
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4ca98d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4ca9ba
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4ca9e5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4ca970
jmp 0x4ca9d5
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004ca920

Function at 0x4cb560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb632
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2423a1d4531d53c9
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x23fd
movabs rdx, 0x800020205020502
mov qword [rsp + 0x22], rdx
movabs rdx, 0x906040907080800
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4cb5cd
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4cb5fa
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4cb625
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4cb5b0
jmp 0x4cb615
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004cb560
Function at 0x4cde20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdf08
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x907d79653b697b87
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x772f626931906e90
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc060c0300090c07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5080c060c030009
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7000301090d0e0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4cdea1
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x4cded3
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cdefb
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0xf
jb 0x4cde87
jmp 0x4cdeef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453440
mov eax, edi
mov ecx, 0xf
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004cde20
Function at 0x4d9980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9a52
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7ab5a9babafa64c9
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xc07c027e
movabs rdx, 0x902030308070004
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5090b020a060902
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d99eb
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d9a1d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4d9a45
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0xc
jb 0x4d99d1
jmp 0x4d9a38
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004d9980

Function at 0x4df3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df4d6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x3f3520742d3d8ae5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd9b8613f3520742d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x381b32471d0d0361
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3120a0e00010611
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc02000d0c090312
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1020907010d0f10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4df473
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4df4a2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4df4c9
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4df456
nop
jmp 0x4df4bd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453440
mov eax, edi
mov ecx, 0x13
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004df3e0
Function at 0x4e22e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2406
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6e41cd736bbe75b6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xaa9c5c62d66dc6b3
mov qword [rsp + 0x24], rdx
movabs rdx, 0x93bf968898efaa9c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x658493da77b2cf92
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1b12160b18191410
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x5160a0a09141b12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50a110e0f170e02
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15131a1c0d19100c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf00081c090e1614
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e23a0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x26
jge 0x4e23cd
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4e23f4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4e2383
jmp 0x4e23e8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.004418e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00453440
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004e22e0
Function at 0x4e3be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3cf2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x59c4766ff47afb4d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64ad50b553d7e5a4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65f2bcb7f5648549
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0903150c16100e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x15070c0903150c16
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd080e0c0e011304
mov qword [rsp + 0x40], rdx
movabs rdx, 0x801150204141516
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1061602110a0615
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e3c91
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4e3cbe
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e3ce5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4e3c74
jmp 0x4e3cd9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00453440
mov eax, edi
mov ecx, 0x18
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004e3be0
Function at 0x4e58c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e59bc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x538463692df9e9ed
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6485f68253846369
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2d6dff5403535461
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1311130803060a0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8080d0208060f0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90100021101030e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e5950
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4e5988
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e59af
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x4e5936
jmp 0x4e59a3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453440
mov eax, edi
mov ecx, 0x14
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004e58c0

Function at 0x4e5de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5edc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x1e382322efce3141
mov qword [rsp + 0x19], rdx
movabs rdx, 0x33ec3c1e382322ef
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf62e40543a64e631
mov qword [rsp + 0x24], rdx
movabs rdx, 0x512101001080a03
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x406090e05121010
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb070a1102110c05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e5e70
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4e5ea8
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e5ecf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x4e5e56
jmp 0x4e5ec3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453440
mov eax, edi
mov ecx, 0x13
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004e5de0