joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ae440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae578
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x5cfd264f5f6609cc
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x18746455205cfd26
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5429ebd83866e259
mov qword [rsp + 0x58], rdx
movabs rdx, 0x14663120435c3761
mov qword [rsp + 0x60], rdx
movabs rdx, 0x275d2a7954ca6364
mov qword [rsp + 0x68], rdx
movabs rdx, 0x500121f0e0c131a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1050d2306231116
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1909091c18120105
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xe0401051910180e
mov qword [rsp + 0x33], rdx
movabs rdx, 0xc07240c001a1022
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x19170a1d031b1416
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4ae518
movzx r9d, byte [rsp + rsi + 0x4b]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x4b], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x4b], dl
add rax, 2
cmp rax, 0x2e
jge 0x4ae548
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4ae56b
movzx r8d, byte [rsp + rdi + 0x4b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x25
jb 0x4ae4fb
jmp 0x4ae55f
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.00447380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x25
call fcn.0045a8c0
nop
call fcn.004585e0
nop dword [rax]
jmp fcn.004ae440

Function at 0x4b0fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b10cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9671d265cf666540
mov qword [rsp + 0x32], rdx
movabs rdx, 0x96bedf6c2c569671
mov qword [rsp + 0x38], rdx
movabs rdx, 0xbb616fced1a53365
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70d090b0f03000b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50312060e10070d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x150b0c1012111210
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4b106a
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b109c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b10bf
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0x16
jb 0x4b1050
jmp 0x4b10b3
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x16
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004b0fe0
Function at 0x4b10e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b11cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3774c711fa156572
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6553f50075f94156
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b65b81c546f3474
mov qword [rsp + 0x40], rdx
movabs rdx, 0x203140305090d04
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1509171315090411
mov qword [rsp + 0x20], rdx
movabs rdx, 0x14130a0715030c14
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4b116a
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b119c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4b11bf
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0x18
jb 0x4b1150
jmp 0x4b11b3
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x18
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004b10e0

Function at 0x4b4200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b42ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x37bd456550662b46
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x5637bd456550662b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30494c2e4b5a6c58
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50c0b0603100909
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc0b0c050c0b06
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7030f0103
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4b428a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x4b42bc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b42df
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0x11
jb 0x4b4270
jmp 0x4b42d3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x11
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004b4200
Function at 0x4b52e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b539d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x65c97c8e203cf4ac
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x2b
movabs rdx, 0x6010501040801
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x805
xor eax, eax
nop
jmp 0x4b5340
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4b536d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b5390
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4b5322
jmp 0x4b5384
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045a8c0
mov eax, edi
mov ecx, 9
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004b52e0

Function at 0x4b69c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x4b6b55
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0xd774634e6c8b6572
mov qword [rsp + 0x5d], rdx
movabs rdx, 0xb59065981c9b1c20
mov qword [rsp + 0x65], rdx
movabs rdx, 0xaaaa2eb59065981c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x6d656cc4d465bcbf
mov qword [rsp + 0x70], rdx
movabs rdx, 0x9dd009c206e6ffe
mov qword [rsp + 0x78], rdx
movabs rdx, 0xc1ae644f6cb6e9d7
mov qword [rsp + 0x80], rdx
movabs rdx, 0x70b26931a86e7479
mov qword [rsp + 0x88], rdx
movabs rdx, 0x72d0a79269290e70
mov qword [rsp + 0x90], rdx
movabs rdx, 0x4160b2f2b250207
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3711341224132731
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4312f27330c200f
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x22170235130a1427
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3807092a07332b23
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x2d022b2e0e173029
mov qword [rsp + 0x45], rdx
movabs rdx, 0x211f0b02042a1b13
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x20f1239020c130b
mov qword [rsp + 0x55], rdx
xor eax, eax
jmp 0x4b6af4
movzx r9d, byte [rsp + rsi + 0x5d]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x5d], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x5d], dl
add rax, 2
cmp rax, 0x40
jge 0x4b6b22
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3b
jae 0x4b6b48
movzx r8d, byte [rsp + rdi + 0x5d]
sub r8d, edx
cmp rsi, 0x3b
jb 0x4b6ad7
nop
jmp 0x4b6b3c
xor eax, eax
lea rbx, [rsp + 0x5d]
mov ecx, 0x3b
call fcn.00447380
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x3b
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x3b
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004b69c0
Function at 0x4b6e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6f5b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x92aa8b6581e5cb72
mov qword [rsp + 0x33], rdx
movabs rdx, 0x5b4ff2617c92aa8b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe565ebeaf1ed7de0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20807050c050a10
mov qword [rsp + 0x19], rdx
movabs rdx, 0x212050301110e01
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb14021205030111
mov qword [rsp + 0x23], rdx
movabs rdx, 0x60d020d0f0c1405
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4b6ef9
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4b6f2b
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b6f4e
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
cmp rsi, 0x15
jb 0x4b6edf
jmp 0x4b6f42
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x15
call fcn.0045a8c0
nop
nop dword [rax + rax]
call fcn.004585e0
jmp fcn.004b6e60

Function at 0x4b8c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x4b8de7
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0xf0a7a306e8ad6572
mov qword [rsp + 0x61], rdx
movabs rdx, 0xd242f0658c6ccf56
mov qword [rsp + 0x69], rdx
movabs rdx, 0x2066fc20739b46d2
mov qword [rsp + 0x70], rdx
movabs rdx, 0x265e1da9b61f01c
mov qword [rsp + 0x78], rdx
movabs rdx, 0x6ad96c326cefd773
mov qword [rsp + 0x80], rdx
movabs rdx, 0x798eea2deabb65b8
mov qword [rsp + 0x88], rdx
movabs rdx, 0xd09230b2c0d201e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x27210d09230b2c0d
mov qword [rsp + 0x21], rdx
movabs rdx, 0x250b1c032a0f0327
mov qword [rsp + 0x29], rdx
movabs rdx, 0x2121052407042c2c
mov qword [rsp + 0x31], rdx
movabs rdx, 0x142605292314252c
mov qword [rsp + 0x39], rdx
movabs rdx, 0x141b211724070d2d
mov qword [rsp + 0x41], rdx
movabs rdx, 0x2917201a23090910
mov qword [rsp + 0x49], rdx
movabs rdx, 0x72621062b2c1821
mov qword [rsp + 0x51], rdx
movabs rdx, 0x21b26182d2c1123
mov qword [rsp + 0x59], rdx
xor eax, eax
jmp 0x4b8d80
movzx r9d, byte [rsp + rsi + 0x61]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x61], dl
mov byte [rsp + rsi + 0x61], r8b
add rax, 2
nop
cmp rax, 0x42
jge 0x4b8db2
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x4b8dda
movzx r8d, byte [rsp + rdi + 0x61]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0x2f
jb 0x4b8d65
jmp 0x4b8dce
xor eax, eax
lea rbx, [rsp + 0x61]
mov ecx, 0x2f
nop
call fcn.00447380
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x2f
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004b8c60
Function at 0x4b9ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9b7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xcf1c63d98e666517
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x1e
movabs rdx, 0x603070707030000
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x804
xor eax, eax
nop
jmp 0x4b9b20
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4b9b4d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b9b70
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4b9b02
jmp 0x4b9b64
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045a8c0
mov eax, edi
mov ecx, 9
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004b9ac0

Function at 0x4b9d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9dbd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6d366b6579688583
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x57
movabs rdx, 0x700070103060502
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x7030803
xor eax, eax
nop
jmp 0x4b9d60
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4b9d8d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b9db0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4b9d42
jmp 0x4b9da4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045a8c0
mov eax, edi
mov ecx, 9
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004b9d00

Function at 0x4be2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be3b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9c816570787f4c75
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4b8f7c627c759c81
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7080d0c0b0a0602
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x10d09070a0c0809
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4be34c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x20]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4be37e
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4be3a5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x20]
cmp rsi, 0xe
jb 0x4be332
jmp 0x4be395
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xe
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004be2e0
Function at 0x4cd480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd57d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3b4165ecdb6703dc
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1d74732c43203b41
mov qword [rsp + 0x40], rdx
movabs rdx, 0xdbaf34402eeaea42
mov qword [rsp + 0x48], rdx
movabs rdx, 0x414011006101103
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100e0f06040a000d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60a1511100e0f06
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x907141312140112
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4cd520
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4cd54d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cd570
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4cd4ff
jmp 0x4cd564
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00447380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x16
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004cd480

Function at 0x4cf580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf66a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6b437770736d9569
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6771657a6b437770
mov qword [rsp + 0x38], rdx
movabs rdx, 0x657c6f7c7c5c2865
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100807020e030b04
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1100610070e1008
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf01070d05120e10
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4cf60d
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jge 0x4cf63a
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4cf65d
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4cf5f0
jmp 0x4cf651
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x14
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004cf580
Function at 0x4d1620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1747
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x56725a8ae05e4b8b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x205a65868abd7a20
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80b081766d786f61
mov qword [rsp + 0x58], rdx
movabs rdx, 0x74666f6a61766686
mov qword [rsp + 0x60], rdx
movabs rdx, 0x181e121a0e191002
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x151e040507191c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x121800151e040507
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13141e1603161701
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9000c0415190b09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x318031e171a180a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d16e9
movzx r9d, byte [rsp + rsi + 0x48]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x48], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x48], dl
add rax, 2
cmp rax, 0x2a
jge 0x4d1717
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x4d173a
movzx r8d, byte [rsp + rdi + 0x48]
sub r8d, edx
cmp rsi, 0x20
jb 0x4d16cc
jmp 0x4d172e
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.00447380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x20
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004d1620

Function at 0x4d4080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d41b8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xad6fb9d76e61bfe1
mov qword [rsp + 0x49], rdx
movabs rdx, 0x53e2c76e85bc77ad
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb320734395dedd69
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe7cacdb51ac4aebe
mov qword [rsp + 0x60], rdx
movabs rdx, 0xcd65746344476e69
mov qword [rsp + 0x68], rdx
movabs rdx, 0x171a012600070404
mov qword [rsp + 0x19], rdx
movabs rdx, 0x722121f211e1905
mov qword [rsp + 0x21], rdx
movabs rdx, 0x171608171b221b18
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1d0a0c040e13091a
mov qword [rsp + 0x31], rdx
movabs rdx, 0x13221c1c110d100e
mov qword [rsp + 0x39], rdx
movabs rdx, 0x71e161b1f071e0c
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x4d4158
movzx r9d, byte [rsp + rsi + 0x49]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x49], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x49], dl
add rax, 2
cmp rax, 0x30
jge 0x4d4188
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x27
jae 0x4d41ab
movzx r8d, byte [rsp + rdi + 0x49]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x27
jb 0x4d413b
jmp 0x4d419f
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x27
call fcn.00447380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x27
call fcn.0045a8c0
nop
call fcn.004585e0
nop dword [rax]
jmp fcn.004d4080
Function at 0x4d4600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d46fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9ed1a6820fa43f9
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1546fa6209ed1a68
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf61e6b322a6549af
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2070b090b0c0a00
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd0d0c0905051306
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10060d0d0c090505
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1020b130a12050f
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4d4699
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d46cb
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d46ee
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x14
jb 0x4d467f
jmp 0x4d46e2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x14
call fcn.0045a8c0
nop
nop dword [rax + rax]
call fcn.004585e0
jmp fcn.004d4600

Function at 0x4d7820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7958
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x8b5e600202dd574
mov qword [rsp + 0x47], rdx
movabs rdx, 0x2008b5e600202dd5
mov qword [rsp + 0x48], rdx
movabs rdx, 0xda2073d16556f73c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7dfe626d79e402c5
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc873e569742030f8
mov qword [rsp + 0x60], rdx
movabs rdx, 0x201a1f1212021701
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7040b040718070b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2017120507040b04
mov qword [rsp + 0x27], rdx
movabs rdx, 0x70a201f061e191c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x2011131f10091f12
mov qword [rsp + 0x37], rdx
movabs rdx, 0x190a1819100d1e0a
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x4d78f5
movzx r9d, byte [rsp + rsi + 0x47]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x47], dl
mov byte [rsp + rsi + 0x47], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4d7928
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4d794b
movzx r8d, byte [rsp + rdi + 0x47]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
nop
cmp rsi, 0x21
jb 0x4d78db
jmp 0x4d793f
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.00447380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x21
call fcn.0045a8c0
nop
call fcn.004585e0
nop dword [rax]
jmp fcn.004d7820