joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d2d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2e5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2eda658ac8d3a46d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6cb0642eda658ac8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x406020303040504
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x304010909020406
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d2df5
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4d2e28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d2e4f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4d2dd8
jmp 0x4d2e43
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004d2d80

Function at 0x4d43a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d449c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8463417d707f7c82
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x767271818463417d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5767776d746d8177
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8090b02010e1204
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd08070701110208
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0d02000410110b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d4430
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d4468
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d448f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x4d4416
jmp 0x4d4483
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004d43a0
Function at 0x4d4a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4ad2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x881b6e656c79cb0e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xdc690068
movabs rdx, 0x90b010700010209
mov qword [rsp + 0x28], rdx
movabs rdx, 0x601030607070603
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d4a6e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4d4a9b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4d4ac5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d4a51
jmp 0x4d4ab6
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d4a00

Function at 0x4d5140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d522b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x63acacb96e717287
mov qword [rsp + 0x18], rdx
movabs rdx, 0x84936bcbb9b59ca5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x904050b090c060f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf0f040a080f010b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0c020008040509
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d51c4
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x4d51f7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4d521e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4d51a7
jmp 0x4d5212
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d5140
Function at 0x4d5240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d531c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x65516f8a4804652c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8d6d4b65516f8a48
mov qword [rsp + 0x20], rdx
movabs rdx, 0x300030600030600
mov qword [rsp + 0x28], rdx
movabs rdx, 0x902030a0a090204
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d52b2
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d52e8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d530f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
nop dword [rax]
cmp rsi, 0xb
jb 0x4d5298
jmp 0x4d5303
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004d5240

Function at 0x4d5ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5ba8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x66727d7551d47252
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa58245c7757da196
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80e0e020f010f0c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10a080e0e020f01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70e0e0907080c05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d5b41
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x12
jge 0x4d5b73
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d5b9b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0x10
jb 0x4d5b27
jmp 0x4d5b8f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d5ac0
Function at 0x4d5bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5ce8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x7a646441dd191443
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x61fcc6ce2674d7ec
mov qword [rsp + 0x26], rdx
movabs rdx, 0x786574dca21cf680
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xdc176f11536f3ad7
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100c0c1013030e12
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1f01100c0c101303
mov qword [rsp + 0x40], rdx
movabs rdx, 0x91119180711080d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x819100911140d0b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x131e0102111c0103
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4d5c80
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4d5cb2
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4d5cdb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x20
jb 0x4d5c63
jmp 0x4d5ccf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x20
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d5bc0

Function at 0x4d6220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6308
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6e65b261e8896519
mov qword [rsp + 0x19], rdx
movabs rdx, 0x10a06f748b6e65b2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc02040b05040508
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8050c02040b0504
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8080c04080b0003
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d62a1
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x4d62d3
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d62fb
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4e]
cmp rsi, 0xd
jb 0x4d6287
jmp 0x4d62ef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d6220
Function at 0x4d6320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6428
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x57554144566c2834
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5e59795357554144
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6b657f6f6e5e6d3f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1040e050b00040c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa06020f0606130c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x60703010a06020f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x31104000f02000b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d63c2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x4d63ef
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d641b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d63a5
jmp 0x4d640f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d6320

Function at 0x4d67c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d68ab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd6e0139a4ea78799
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x875fe7726178acab
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80205040100070a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf000a0400000802
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf090a0d06090d0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d6844
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x16
jge 0x4d6877
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4d689e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x4d6827
jmp 0x4d6892
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d67c0
Function at 0x4d78c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d79b6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6978657485cf72fd
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x652c6978657485cf
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf7086c107070fbf5
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa08020608100e10
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0f0a0802060810
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb00111002030310
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4d7953
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x4d7982
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d79a9
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4d7936
nop
jmp 0x4d799d
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004d78c0

Function at 0x4d9820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d98fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x9d648aed748c78b1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x808f9d9d648aed74
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6040507050809
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20a020606050006
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d9892
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d98c8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d98ef
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
nop dword [rax]
cmp rsi, 0xb
jb 0x4d9878
jmp 0x4d98e3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004d9820
Function at 0x4d9a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9ae8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x87301daeeea7a7b4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5765ca4846748730
mov qword [rsp + 0x24], rdx
movabs rdx, 0x50407000a060306
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb04030205040700
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b01020b020b06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d9a81
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4d9ab3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d9adb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0xe
jb 0x4d9a67
jmp 0x4d9acf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d9a00

Function at 0x4d9b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9be8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf8788b88646e69cf
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5796071c8cf8788b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa04050b0805090a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0b0a04050b0805
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80a040705080b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d9b81
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x4d9bb3
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d9bdb
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0xd
jb 0x4d9b67
jmp 0x4d9bcf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d9b00
Function at 0x4da400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da508
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xb72be4b58d65d146
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xac6e656d0e6f72b7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xec62316e697274f1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140f160a15160303
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6011415150a0405
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x60f06011415150a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160605040401070e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4da4a2
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1a
jge 0x4da4cf
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4da4fb
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4da485
jmp 0x4da4ef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004da400

Function at 0x4dbe60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dbf5c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xfc7a690d457465f8
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8c6ffc7a690d4574
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3773b66707c00ab0
mov qword [rsp + 0x22], rdx
movabs rdx, 0x110e0f0c00000e0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0e060f0c0a110e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70f0b0d0c040d09
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4dbef0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x4dbf28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4dbf4f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x4dbed6
jmp 0x4dbf43
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004dbe60
Function at 0x4dc2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc3a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xbb65ee55461f4f15
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x13c0bb65ee55461f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc6132c74c0ab6921
mov qword [rsp + 0x26], rdx
movabs rdx, 0x910100d07040f08
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10009090a021109
mov qword [rsp + 0x36], rdx
movabs rdx, 0x507010009090a02
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf040f0c05110011
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dc340
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4dc372
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4dc39b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0x12
jb 0x4dc325
jmp 0x4dc38f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004dc2a0
Function at 0x4e0980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0a5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xdedaf3ede0fae156
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xdf636f5f6ededaf3
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10c090902030707
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90605040402010c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e09f2
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4e0a28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e0a4f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
nop dword [rax]
cmp rsi, 0xd
jb 0x4e09d8
jmp 0x4e0a43
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004e0980

Function at 0x4e0d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0e28
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x48eaed756069f557
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x103070603040303
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x605
xor eax, eax
jmp 0x4e0dc3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4e0df0
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4e0e1b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4e0da6
jmp 0x4e0e0f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e0d60