joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c8f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c907f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x354460364e73261c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x57066512203c22c4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10a040e080a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x407070b09000107
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50a01070c01060a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c9004
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x35]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x35]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x4c903b
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x4c9071
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c9065
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4c8fe7
jmp 0x4c9056
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x10
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004c8f80

Function at 0x4c9800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c98df
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x745247215b265100
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x972
movabs rdx, 0x601060209030400
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5040303
xor eax, eax
jmp 0x4c9866
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4c989d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x4c98d1
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4c98c5
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4c9849
jmp 0x4c98b8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004c9800
Function at 0x4ca1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca2bf
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xfe8e10da61657291
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xceeef905e9f6f478
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0b0406000f050d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8040d0c0f0b0406
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90c0c0a070e0a04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ca241
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x14
jge 0x4ca27d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x4ca2b1
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ca2a5
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0x10
jb 0x4ca227
jmp 0x4ca298
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x10
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004ca1c0

Function at 0x4ca5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca6ad
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x432247413850722a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1a65db4322474138
mov qword [rsp + 0x22], rdx
movabs rdx, 0x30a0204060a080a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x607050808030a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ca635
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4ca66c
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x4ca69f
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ca693
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ca618
jmp 0x4ca687
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004ca5c0
Function at 0x4caf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb00b
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6853684a5a65726d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x655f6d6853684a5a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70456e707263697e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0e110003050912
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb070f0705040d0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd090d040e050a03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4caf93
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4cafca
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x4caffd
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4caff1
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4caf76
jmp 0x4cafe5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457f40
mov eax, edi
mov ecx, 0x13
call fcn.00457f40
mov rax, rsi
mov ecx, 0x16
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004caf00

Function at 0x4cc9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cca93
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc24d9861acffc846
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9865cad97393c24d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30d030208070b05
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50d08050a080d01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cca12
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4cca4e
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x4cca85
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cca75
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0xe
jb 0x4cc9f8
jmp 0x4cca69
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004cc9a0
Function at 0x4cd7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd8cb
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2672723652546563
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7573646e26727236
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4d7a5456615d8e72
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7020e0303071110
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe000909130f0403
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0f0b02120d1102
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cd853
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x4cd88a
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x4cd8bd
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4cd8b1
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4cd836
jmp 0x4cd8a5
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457f40
mov eax, edi
mov ecx, 0x14
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004cd7c0

Function at 0x4cd8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd9eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xf1f8fec6f8036547
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6ef1f8fec6f80365
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd7365f36ff5f40c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0503040a0a0a02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10090b0503040a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa050606070d0505
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4cd973
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4cd9aa
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x4cd9dd
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4cd9d1
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4cd956
jmp 0x4cd9c5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457f40
mov eax, edi
mov ecx, 0x11
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004cd8e0
Function at 0x4ce760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce849
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x9189076df574659d
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x720be472
movabs rdx, 0x600050a06060700
mov qword [rsp + 0x28], rdx
movabs rdx, 0x303070900030403
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ce7ce
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x7b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x7b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4ce808
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x10
jae 0x4ce83b
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ce82f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ce7b1
jmp 0x4ce823
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004ce760

Function at 0x4ceae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cebdf
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x91ad6fe4d22565d5
mov qword [rsp + 0x18], rdx
movabs rdx, 0x73ba65e3b0dd91ad
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60a0c0809040302
mov qword [rsp + 0x26], rdx
movabs rdx, 0x703060a0c080904
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2090c0600020708
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ceb61
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x4ceb9d
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x4cebd1
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cebc5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
cmp rsi, 0xe
jb 0x4ceb47
jmp 0x4cebb8
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004ceae0
Function at 0x4cff00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d001f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa2397311e174b5e7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc11065b1cb146da2
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3c6dd844e2cbb53e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6000e03010f0412
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa011200130b1316
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x14140a011200130b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7100709070d1611
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4cffa0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4cffdc
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4d0011
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d0005
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x17
jb 0x4cff85
jmp 0x4cfff7
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x17
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004cff00

Function at 0x4d1380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d146d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x33447590706f8781
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x69857e684e793344
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4030d08060d080b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5030d0a0006010c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d13f5
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4d142c
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x4d145f
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d1453
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d13d8
jmp 0x4d1447
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004d1380
Function at 0x4d1c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1d5f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x59dae974390a7dc
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x69447488059dae97
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf9797587a36365c5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x600010407061305
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x513050c10080011
mov qword [rsp + 0x36], rdx
movabs rdx, 0x13060513050c1008
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20c0c0c1311020f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d1ce0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4d1d1c
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4d1d51
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d1d45
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0x14
jb 0x4d1cc5
jmp 0x4d1d37
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x14
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004d1c40

Function at 0x4d21c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d22cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x390ad6946741ea7
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x86740390ad694674
mov qword [rsp + 0x30], rdx
movabs rdx, 0x228465746b9369a0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1110c060d110d07
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x110d01110c060d11
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50d0a0a10110009
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4d2253
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x4d228a
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x4d22bd
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d22b1
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4d2236
jmp 0x4d22a5
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457f40
mov eax, edi
mov ecx, 0x12
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004d21c0
Function at 0x4d2d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2e3f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xf751d3dc6d4bcaea
mov qword [rsp + 0x18], rdx
movabs rdx, 0x31ede05bfc72f765
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6050602000f0f0f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1060c020e060d04
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70b0209010e0206
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d2dc4
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x4d2dfb
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x4d2e31
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d2e25
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4d2da7
jmp 0x4d2e16
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x10
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004d2d40
Function at 0x4d3aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3b7f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6ced46653dc23d57
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xac
movabs rdx, 0x802020103020608
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x108
xor eax, eax
jmp 0x4d3b00
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x4d3b3c
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x4d3b71
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d3b65
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 9
jb 0x4d3ae6
jmp 0x4d3b57
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop
call fcn.00457f40
mov eax, edi
mov ecx, 9
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004d3aa0

Function at 0x4d3ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3cb3
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5da9639f73746547
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x53888eba5da9639f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x55a38d64998f6b6f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60a031209130f08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40403070a0f0e0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60f0d120f041311
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d3c30
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d3c6d
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
nop
cmp rsi, 0x18
jae 0x4d3ca5
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d3c94
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 0x14
jb 0x4d3c16
jmp 0x4d3c88
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457f40
mov eax, edi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004d3ba0
Function at 0x4d3f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4073
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe578cc70fa74d6e2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x655c72cbfd0a8966
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc06090901030a0b
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe0907050c0e0e
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4d3ff2
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d402e
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x4d4065
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d4055
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x10
jb 0x4d3fd8
jmp 0x4d4049
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457f40
mov eax, edi
mov ecx, 0x10
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004d3f80

Function at 0x4d41c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d42bf
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xbb72cff6b58ea208
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd900fab974d8bb72
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20a080805010d0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40d030b020a0808
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10d07080d0c0100
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d4244
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x4d427b
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x4d42b1
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d42a5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d4227
jmp 0x4d4296
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004d41c0