joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c6600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c66eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xb6aacf136d7265a2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9de477c96f728c65
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe00060e04070e04
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc06090d0e00060e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0607070f040405
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c6684
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x4c66b7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4c66de
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4c6667
jmp 0x4c66d2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00441880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.004533e0
mov eax, edi
mov ecx, 0x10
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004c6600

Function at 0x4c7dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7e92
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8978877356618080
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x656c85a0
movabs rdx, 0x305050108030607
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x300090601050305
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c7e2e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4c7e5b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c7e85
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4c7e11
jmp 0x4c7e76
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.004533e0
mov eax, edi
mov ecx, 0xc
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004c7dc0
Function at 0x4c8c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8cdc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x74d06c866eccaaa2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa565af94abfc74d0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x602020a080a0904
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa000d020b010602
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4c8c75
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4c8ca8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c8ccf
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4c8c58
jmp 0x4c8cc3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.004533e0
mov eax, edi
mov ecx, 0xe
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004c8c00

Function at 0x4cb260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb329
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x96a490b8ae919d98
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x8170
movabs rdx, 0x702060300010400
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5030609
xor eax, eax
jmp 0x4cb2c3
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x4cb2f5
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4cb31c
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0xa
jb 0x4cb2a9
jmp 0x4cb310
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.004533e0
mov eax, edi
mov ecx, 0xa
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004cb260
Function at 0x4d8e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8f6b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xccedcb14d267b7a5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd9c5b2d5654b03cc
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3000c0d0d080403
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10703000c0d0d08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50e0b06070d070d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d8f04
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x4d8f37
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4d8f5e
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4d8ee7
jmp 0x4d8f52
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.00441880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.004533e0
mov eax, edi
mov ecx, 0xf
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004d8e80

Function at 0x4d8f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d905c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa4060b9e9110710e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x578265f31da4060b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3080b0807030502
mov qword [rsp + 0x28], rdx
movabs rdx, 0x609010600070406
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d8ff2
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d9028
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d904f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
nop dword [rax]
cmp rsi, 0xd
jb 0x4d8fd8
jmp 0x4d9043
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.004533e0
mov eax, edi
mov ecx, 0xd
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004d8f80
Function at 0x4e04c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e05bc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x204671715d6d7c1f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x706e655c63204671
mov qword [rsp + 0x22], rdx
movabs rdx, 0x655f69535476724e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x101304010c04050f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8010d0000101013
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd13030a09041106
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e0550
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e0588
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e05af
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x4e0536
jmp 0x4e05a3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.004533e0
mov eax, edi
mov ecx, 0x15
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004e04c0

Function at 0x4e09a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0aa8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x200738f673ec48ed
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe86edaf1be200738
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd66d75f52064fd9a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe060d0e0d050208
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc00050404040402
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa140c0005040404
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9090111120012
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e0a40
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4e0a72
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e0a9b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x15
jb 0x4e0a25
jmp 0x4e0a8f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.004533e0
mov eax, edi
mov ecx, 0x15
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004e09a0
Function at 0x4e3e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3f86
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x1f6c6072956eb66f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcbd5be646e0f6053
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa465a5d2ac20cbd5
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x814963f7b50ea691
mov qword [rsp + 0x34], rdx
movabs rdx, 0x170a1a07180e1d0a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1a15011c170a1a07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1703070915050113
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30e0d161600120d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d03130f190d1811
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e3f20
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x24
jge 0x4e3f4d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4e3f74
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4e3f03
jmp 0x4e3f68
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00441880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.004533e0
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004e3e60

Function at 0x4e3fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e40b2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x696220746e696153
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc3c36d1003f28a65
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfd93c3c36d1003f2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7c56691014efafe2
mov qword [rsp + 0x30], rdx
movabs rdx, 0x130c0d0f1818090d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1009141306151912
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb14110f06180a0e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1218110915160a16
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e4051
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x4e407e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4e40a5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4e4034
jmp 0x4e4099
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00441880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004533e0
mov eax, edi
mov ecx, 0x1a
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004e3fa0
Function at 0x4e5000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5132
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x4e743a6f2a2d2e17
mov qword [rsp + 0x18], rdx
movabs rdx, 0x51225f10dd1d20a4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x236e231f53205122
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3dcc694823b84ba3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x170c150e0b080216
mov qword [rsp + 0x36], rdx
movabs rdx, 0x71c1718091c0b00
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1d13071c1718091c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1512000a050e0209
mov qword [rsp + 0x48], rdx
movabs rdx, 0x215030217151909
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd130a0b1a031d0f
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e50cf
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x2a
jge 0x4e50fc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4e5125
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4e50b2
jmp 0x4e5117
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.00441880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
nop
call fcn.004533e0
mov eax, edi
mov ecx, 0x1e
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004e5000
Function at 0x4e6620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6716
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x96206969c097728b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x948aa6c596206969
mov qword [rsp + 0x30], rdx
movabs rdx, 0x639c9e95a87ed081
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb12080b0c0e0d03
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5020a0b12080b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x710030d130f1109
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4e66b3
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x4e66e2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e6709
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4e6696
nop
jmp 0x4e66fd
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00441880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x14
call fcn.004533e0
mov eax, edi
mov ecx, 0x14
call fcn.004533e0
nop
call fcn.00450d80
nop dword [rax + rax]
jmp fcn.004e6620
Function at 0x4e86e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e87e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x77356c6568612372
mov qword [rsp + 0x18], rdx
movabs rdx, 0x646e6c7477356c65
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x71608361a164294e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x12090603060f1101
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd02000307020207
mov qword [rsp + 0x34], rdx
movabs rdx, 0x613020d020003
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100c0c131106100d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e8780
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x20]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4e87b2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e87db
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x20]
cmp rsi, 0x14
jb 0x4e8765
jmp 0x4e87cf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.004533e0
mov eax, edi
mov ecx, 0x14
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004e86e0
Function at 0x4e8c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8d28
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x38e35969e3ffd852
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe1c46938e35969e3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x56b54123df53918a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb101112050e120f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe06070d010f0c0e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x70d06060e06070d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3020b0a0a02090a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e8cc0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4e8cf2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e8d1b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x13
jb 0x4e8ca5
jmp 0x4e8d0f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.004533e0
mov eax, edi
mov ecx, 0x13
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004e8c20

Function at 0x4eb5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb6c8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x3f5c4622cdfce799
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6ee1245393e13774
mov qword [rsp + 0x25], rdx
movabs rdx, 0x96ee1245393e137
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3c6daf54bd642726
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x910071006050e02
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb091007100605
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10030d12010a1807
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1100140e18061205
mov qword [rsp + 0x48], rdx
movabs rdx, 0x711070416000d06
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4eb660
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4eb692
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4eb6bb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0x19
jb 0x4eb643
jmp 0x4eb6af
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
nop
call fcn.00441880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.004533e0
mov eax, edi
mov ecx, 0x19
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004eb5a0
Function at 0x4ec200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec2fc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5a497a5726f8d80
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64da61bd05a497a5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8dae7c73764a7261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa01101308060107
mov qword [rsp + 0x32], rdx
movabs rdx, 0x612130f0a050a01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x41100130401060e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ec290
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ec2c8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ec2ef
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x4ec276
jmp 0x4ec2e3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.004533e0
mov eax, edi
mov ecx, 0x14
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004ec200
Function at 0x4edee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4edfe8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x656e3f87cb90866c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7b6e6174537e656e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5865c9547d647274
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1513031108050303
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe04010e11021501
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe140e04010e1102
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd1113050d0015
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4edf80
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4edfb2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4edfdb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0x16
jb 0x4edf65
jmp 0x4edfcf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.004533e0
mov eax, edi
mov ecx, 0x16
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004edee0

Function at 0x4ef720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef81c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2065996e616d9381
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5f83a57f53206599
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7eaa696f7663719c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x110c000a14050b13
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90f090d0f01140e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1100900010b010b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ef7b0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ef7e8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ef80f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x4ef796
jmp 0x4ef803
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.004533e0
mov eax, edi
mov ecx, 0x15
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004ef720
Function at 0x4f1940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1a36
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x3f74cc202bd67746
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc76e3f74cc202bd6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6537dd755c6479cb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100f0b0e0201010d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa030a01030e0b09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30e070e090f0502
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f19d3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4f1a02
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4f1a29
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4f19b6
nop
jmp 0x4f1a1d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.004533e0
mov eax, edi
mov ecx, 0x12
call fcn.004533e0
nop
call fcn.00450d80
nop dword [rax + rax]
jmp fcn.004f1940