joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4cda20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdb28
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6c77aa74c0070b97
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7361956c77aa74c0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xaf7816005d872cee
mov qword [rsp + 0x26], rdx
movabs rdx, 0x605100e0d0f0b08
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0b1003010d0000
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1000f0b1003010d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x206050c120c1003
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cdac2
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x4cdaef
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4cdb1b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4cdaa5
jmp 0x4cdb0f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f500
mov eax, edi
mov ecx, 0x13
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004cda20

Function at 0x4ce2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce3dc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x636b70756b6f6f67
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x26636b70756b6f6f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4a644381652c7543
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe060b06000b0c0d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8000d000e060b06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60d060900091006
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ce370
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x4ce3a8
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ce3cf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x4ce356
jmp 0x4ce3c3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f500
mov eax, edi
mov ecx, 0x11
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004ce2e0
Function at 0x4d0920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0a28
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1e2f70191972778a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x887369f61e2f7019
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x27140c1e747ca665
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60e000e09060101
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x120b000710030701
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1311120b00071003
mov qword [rsp + 0x38], rdx
movabs rdx, 0x607120e08040d04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d09c0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4d09f2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d0a1b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0x14
jb 0x4d09a5
jmp 0x4d0a0f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004d0920

Function at 0x4d0fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d10a8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x431e25314e3ca8e5
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x508f7b931eb1612
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe0d000f0b05020a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe010d0e0c0d0e0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x609080f04020f0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d1041
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d1073
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d109b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
cmp rsi, 0x10
jb 0x4d1027
jmp 0x4d108f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004d0fc0
Function at 0x4d2600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d26d2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x69010f13abfc1543
mov qword [rsp + 0x19], rdx
movabs rdx, 0x88100869010f13ab
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10403020a0a0508
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x209060a
xor eax, eax
jmp 0x4d266e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4d269b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d26c5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4d2651
jmp 0x4d26b6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004d2600

Function at 0x4d26e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d27c8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7648d06061c4ca0d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd6cc30214cc5ca76
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0b09020b070b04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7000c0e0c0d0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70d05040e0c0801
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d2761
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d2793
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d27bb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
cmp rsi, 0xf
jb 0x4d2747
jmp 0x4d27af
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f500
mov eax, edi
mov ecx, 0xf
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004d26e0
Function at 0x4d6420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6532
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xc957767e4d6945e8
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe57574655d51eec9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x57656bde6152f37f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x302030113021114
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe07030203011302
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10130614000c0a10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140001100f010804
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30101090d031108
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d64d1
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x22
jge 0x4d64fe
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d6525
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4d64b4
jmp 0x4d6519
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004d6420

Function at 0x4d6b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6c36
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x927a6c6f768b699a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8974616d664d8362
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e698974616d664d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x655a64705f527955
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20f070016010918
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf06081607010312
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1005160809041508
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14140b0412040a00
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d6bce
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4d6c02
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4d6c29
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 0x1a
jb 0x4d6bb4
nop
jmp 0x4d6c1d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f500
mov eax, edi
mov ecx, 0x1a
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004d6b20
Function at 0x4d6d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6e1c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x87ebca93e17465b0
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf2906d614e687c61
mov qword [rsp + 0x30], rdx
movabs rdx, 0x404090503040f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x50e0703000e0506
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4d6db5
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x4d6de8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d6e0f
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0x10
jb 0x4d6d98
jmp 0x4d6e03
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004d6d40

Function at 0x4d6e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6f28
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5b6c724f4c8d6566
mov qword [rsp + 0x18], rdx
movabs rdx, 0x71656d934e706761
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70205000206060c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20409010406050f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90a010104070600
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d6ec1
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d6ef3
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d6f1b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x10
jb 0x4d6ea7
jmp 0x4d6f0f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004d6e40
Function at 0x4d6f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d702b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa4926f80e87465e5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe0e022b19e81a492
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0c08070b0b030d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0900040c0c0807
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0a060309040d0c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d6fc4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x4d6ff7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4d701e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d6fa7
jmp 0x4d7012
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004d6f40

Function at 0x4d7040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7152
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x29a18f7551ee6f1f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x74906cddc7b69464
mov qword [rsp + 0x27], rdx
movabs rdx, 0xba74906cddc7b694
mov qword [rsp + 0x28], rdx
movabs rdx, 0x734579d5a2536e8f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa090c020b0e0016
mov qword [rsp + 0x38], rdx
movabs rdx, 0x111505070c070109
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0c170c11140606
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160e171716160210
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d70f1
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x4d711e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d7145
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4d70d4
jmp 0x4d7139
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f500
mov eax, edi
mov ecx, 0x19
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004d7040
Function at 0x4d7160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7256
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa3c29541040c0cf1
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf3a3c29541040c0c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57f4f88deafda661
mov qword [rsp + 0x22], rdx
movabs rdx, 0x305010a0e0b0a0d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x308070204030305
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80f0d02060d000c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d71f3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x4d7222
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4d7249
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x4d71d6
nop
jmp 0x4d723d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f500
mov eax, edi
mov ecx, 0x11
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004d7160

Function at 0x4d8600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d86dc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4fc96569ab83acf3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x916cfe34664fc965
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa010c0006060a09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9020c0c01030a01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d8672
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d86a8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d86cf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
nop dword [rax]
cmp rsi, 0xd
jb 0x4d8658
jmp 0x4d86c3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f500
mov eax, edi
mov ecx, 0xd
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004d8600
Function at 0x4d8d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8deb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa37373b063d57250
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd3e99d800132a373
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb040c020d0a0c02
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0a0d0c0b040c02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90707090a070909
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d8d84
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x4d8db7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4d8dde
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d8d67
jmp 0x4d8dd2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004d8d00

Function at 0x4da120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da20b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x50f2e571e3d865e4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xefdf086e487950f2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x400060d05040c09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50b03060400060d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20005000008030c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4da1a4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x4da1d7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4da1fe
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4da187
jmp 0x4da1f2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004da120
Function at 0x4db620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db6fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6f5c57708f755172
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7f5a8c7972657f66
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0c0f0202090d06
mov qword [rsp + 0x18], rdx
movabs rdx, 0x500070101030d06
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4db692
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4db6c8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4db6ef
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
nop dword [rax]
cmp rsi, 0x10
jb 0x4db678
jmp 0x4db6e3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004db620

Function at 0x4dbf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc048
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x672ae3355eedaa8
mov qword [rsp + 0x18], rdx
movabs rdx, 0x57100c650d5f0672
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x709020009040809
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc04070902000904
mov qword [rsp + 0x28], rdx
movabs rdx, 0x701010b0b020502
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4dbfe1
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x4dc013
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4dc03b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0xe
jb 0x4dbfc7
jmp 0x4dc02f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004dbf60
Function at 0x4de0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de172
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6a724c5b5d74495a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6540416a724c5b5d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x100080503090707
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4030005
xor eax, eax
jmp 0x4de10b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4de13d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4de165
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0xb
jb 0x4de0f1
jmp 0x4de158
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004de0a0

Function at 0x4ebce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ebdc8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7461607266676570
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x575b457a52494674
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3040b0a0b0b0803
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x908040303040b0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x809050d02050b00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ebd61
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4ebd93
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ebdbb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0xf
jb 0x4ebd47
jmp 0x4ebdaf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f500
mov eax, edi
mov ecx, 0xf
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004ebce0