joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c6e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6fa8
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xbbdb98de5d74826e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x98db64bbdb98de5d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6ede3de6fddef684
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe7666f69747bf2e1
mov qword [rsp + 0x30], rdx
movabs rdx, 0xcc4373bb499c4e6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x210b210b05152213
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10b0c0d15090e05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a0a0310141c1913
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc191e101104071e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x60b090f1d1d1319
mov qword [rsp + 0x60], rdx
movabs rdx, 0x141f0706011f1003
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4c6f40
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x4c6f72
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4c6f9b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 0x23
jb 0x4c6f22
jmp 0x4c6f8f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x23
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x23
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004c6e60

Function at 0x4c76a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c775c
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x595a516e6120456e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x105050507060105
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4c76f4
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4c7728
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4c774f
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
nop
cmp rsi, 8
jb 0x4c76da
jmp 0x4c7743
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004c76a0
Function at 0x4c8180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8292
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xef3f8b690e71650b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x746f6e20f7438c20
mov qword [rsp + 0x22], rdx
movabs rdx, 0xeb20746f6e20f743
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9461f1fc0a694476
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x17070a160319050b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x618111619161503
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x900001806181116
mov qword [rsp + 0x40], rdx
movabs rdx, 0x190000060b131306
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c8231
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x4c825e
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4c8285
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4c8214
jmp 0x4c8279
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004c8180
Function at 0x4cb380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb4a8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x86866e20516d616e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaaec87bc028ca846
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e1baaec87bc028c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8a72a078747d8b05
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3080f1012080709
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf09061903080f10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30a09130e090b0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170d16170b160c0e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x131009170c140a0e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4cb440
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4cb472
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4cb49b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x1a
jb 0x4cb423
jmp 0x4cb48f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004cb380

Function at 0x4ccb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ccc26
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x10c53a6fd9bc72b5
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x742067f66f72f465
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf1fba7bf19ac7420
mov qword [rsp + 0x28], rdx
movabs rdx, 0xcb656b63f473a072
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1d09191108170303
mov qword [rsp + 0x38], rdx
movabs rdx, 0x509150819131000
mov qword [rsp + 0x40], rdx
movabs rdx, 0x902150c0c0c0508
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20307080611121d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x131208020c071314
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ccbc0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x28
jge 0x4ccbed
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4ccc14
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4ccba3
jmp 0x4ccc08
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004ccb00
Function at 0x4ccc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ccd68
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x34324faa9c2c436e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x743c75ada71f4f0e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x45e8216f20743c75
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe5676e4550216613
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8190b0902140a18
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1415171208190b09
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5011904130c0e03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18121c141c090e14
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13171c0c06071419
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ccd00
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4ccd32
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ccd5b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x1d
jb 0x4ccce3
jmp 0x4ccd4f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1d
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004ccc40

Function at 0x4ccd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cce76
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb5c09b746fbc1372
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x101a65262e56b5c0
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8507676ed9386320
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1114020c06071501
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc10080c070d140a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x609050910090601
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cce13
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x4cce42
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cce69
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4ccdf6
nop
jmp 0x4cce5d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x16
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004ccd80
Function at 0x4ce320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce408
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x11c663cc781d6f6e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1d217b1541722411
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6020804060c0c0a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0b06020804060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a0d0e0e080803
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ce3a1
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x4ce3d3
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ce3fb
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0xf
jb 0x4ce387
jmp 0x4ce3ef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004ce320

Function at 0x4ce6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce7a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x464e266521619473
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6cf06620c0464e26
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xeb04641eb5ca295d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30d0813100e0d10
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x13080f0b01051405
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe1113080f0b0105
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30f05050b08110e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ce742
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x4ce76f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ce79b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4ce725
jmp 0x4ce78f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004ce6a0
Function at 0x4cfda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cfed2
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6ce6c51606b8a20e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd824c37669326420
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb17498d6d824c376
mov qword [rsp + 0x26], rdx
movabs rdx, 0x37e5d0e2d1fac461
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf10101618001313
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa15050317191511
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd0f0a1505031719
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6011a0611020e03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x19100d1b0a161b06
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b00111a171b04
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4cfe6f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2a
jge 0x4cfe9c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4cfec5
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4cfe52
jmp 0x4cfeb7
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1c
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004cfda0

Function at 0x4d0500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0612
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x4ddcdce7316abd69
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6ef2d73736fea55
mov qword [rsp + 0x23], rdx
movabs rdx, 0xed06ef2d73736fea
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe85dd06c2064d469
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9171307130f0301
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1316130603120802
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x501040913161306
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10080e120216180f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d05b1
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4d05de
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d0605
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4d0594
jmp 0x4d05f9
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x19
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d0500
Function at 0x4d3840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3928
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x16da26ecdb965bd
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3a97f1f797016da2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9070b0002020a08
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0809070b000202
mov qword [rsp + 0x28], rdx
movabs rdx, 0x507030505090508
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d38c1
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x4d38f3
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d391b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0xd
jb 0x4d38a7
jmp 0x4d390f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d3840

Function at 0x4d3bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3c9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x797263fb1c18fa15
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa9b24565756c5cff
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80f030e0f090500
mov qword [rsp + 0x18], rdx
movabs rdx, 0x908040203010004
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4d3c32
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d3c68
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d3c8f
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
nop dword [rax]
cmp rsi, 0x10
jb 0x4d3c18
jmp 0x4d3c83
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004d3bc0
Function at 0x4d3cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3de6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x4394f79a98694c26
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6122f36690f2c9a2
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb5a74a9bf943b4ac
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc96fb853e154b8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a0104020d061603
mov qword [rsp + 0x38], rdx
movabs rdx, 0x151a00150b0e0514
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1081a0b131c0a1c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15111017101f0618
mov qword [rsp + 0x50], rdx
movabs rdx, 0x141c1a111e090011
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4d3d80
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x28
jge 0x4d3dad
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4d3dd4
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x4d3d63
jmp 0x4d3dc8
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x20
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d3cc0
Function at 0x4d5be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5cc8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7669616441717747
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8d738c49706e7176
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0901060e0a0c0e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa06080d0e010c09
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0d07070c08020a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d5c61
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x14]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d5c93
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d5cbb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x14]
cmp rsi, 0xf
jb 0x4d5c47
jmp 0x4d5caf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d5be0

Function at 0x4d5dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5e88
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x755b7850636e436d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x700050707070504
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6010504
xor eax, eax
jmp 0x4d5e20
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xb]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4d5e52
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d5e7b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xb]
cmp rsi, 8
jb 0x4d5e02
jmp 0x4d5e6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d5dc0
Function at 0x4d8100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d81eb
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6e4dc0c3d6e8ece3
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe3f7f869f4746e4d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x202050007090d03
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb06020205000709
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10c0b0904040102
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d8184
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x4d81b7
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4d81de
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d8167
jmp 0x4d81d2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d8100

Function at 0x4d8740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d881c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x654d74619c8391ba
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x578289949692654d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10300000a020008
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc010b0b09080103
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4d87b2
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d87e8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d880f
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
nop dword [rax]
cmp rsi, 0xe
jb 0x4d8798
jmp 0x4d8803
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004d8740