joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c3ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3dc8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x616ba5d684a8c37b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa16cc573677f1595
mov qword [rsp + 0x23], rdx
movabs rdx, 0x205795a5baa16cc5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8c676e619720965d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9010406050d1013
mov qword [rsp + 0x38], rdx
movabs rdx, 0x121811161c0a0106
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9040603080f0209
mov qword [rsp + 0x48], rdx
movabs rdx, 0x311160402180305
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8010b1505001300
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c3d60
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffc6
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4c3d91
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4c3dbb
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffc6
add r8d, edx
cmp rsi, 0x1d
jb 0x4c3d43
jmp 0x4c3daf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f380
mov eax, edi
mov ecx, 0x1d
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004c3ca0

Function at 0x4c3ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3fcb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3123743bf36a3f2b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x36c0e303e9729f73
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0b070003060309
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90d0e0b07000306
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b010c0c0b0f0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c3f64
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4c3f97
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4c3fbe
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4c3f47
jmp 0x4c3fb2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004c3ee0
Function at 0x4c63e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c64f2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6cfa63b1746f7d70
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1872cc3369a60b3e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20110b2b1872cc33
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd465fbdda77474e1
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf1b0d0401180d0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100419061117090d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x190a061201181412
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc1011080c011110
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c6491
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x20
jge 0x4c64be
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4c64e5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4c6474
jmp 0x4c64d9
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045f380
mov eax, edi
mov ecx, 0x1c
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004c63e0
Function at 0x4c6ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6fc8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd467b25a131ea465
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd5c4756605d467b2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70c030101020804
mov qword [rsp + 0x26], rdx
movabs rdx, 0x105070c03010102
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc050c040c0b0307
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c6f61
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffba
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x4c6f92
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c6fbb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffba
add r8d, edx
cmp rsi, 0xd
jb 0x4c6f47
jmp 0x4c6faf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f380
mov eax, edi
mov ecx, 0xd
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004c6ee0

Function at 0x4c7620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c76f2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2f3c86502d90b05
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x9bccc20a
movabs rdx, 0xa08070b0b0b0b02
mov qword [rsp + 0x28], rdx
movabs rdx, 0x507000302010609
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c768b
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x5a
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c76bc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c76e5
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x5a
add r8d, edx
cmp rsi, 0xc
jb 0x4c7671
jmp 0x4c76d7
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f380
mov eax, edi
mov ecx, 0xc
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004c7620
Function at 0x4c7940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7a1c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2e1b32722e1d6334
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4e6c642e1b32722e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x203020605060a00
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10002000a0203
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c79b5
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4c79e8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c7a0f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4c7998
jmp 0x4c7a03
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.004c7940

Function at 0x4c8de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8ebc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5973a06a7c766f6c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x536f865973a06a7c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x901040803050405
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa08020500070204
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c8e52
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffe8
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c8e88
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c8eaf
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffe8
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4c8e38
jmp 0x4c8ea3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.004c8de0
Function at 0x4c91e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9306
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xaedf72439ed2959f
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf5a666f0aa9765e9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x74a69ca9f5a666f0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2508aa745dffb7ef
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x310060b1b070d0a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x160b02120310060b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x714081a0e190c1a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140706000b170f1a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15011a0c1a0b1211
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c92a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x24
jge 0x4c92cd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4c92f4
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4c9283
jmp 0x4c92e8
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045f380
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004c91e0

Function at 0x4c9c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9d3c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6f53696636506571
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x65726e745b6f5369
mov qword [rsp + 0x22], rdx
movabs rdx, 0x405070a08000803
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x402030806030405
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c9cd5
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4c9d08
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c9d2f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xd
jb 0x4c9cb8
jmp 0x4c9d23
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f380
mov eax, edi
mov ecx, 0xd
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.004c9c60
Function at 0x4ca680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca776
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x726f63ec52738490
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x64726f63ec527384
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8d65beaee2f669b2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90b100d0410090c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0c000e090b100d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x101010910010e00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ca710
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffc2
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x4ca742
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ca769
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffc2
add r8d, edx
cmp rsi, 0x11
jb 0x4ca6f6
nop
jmp 0x4ca75d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f380
mov eax, edi
mov ecx, 0x11
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004ca680

Function at 0x4cd780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd86b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5623346f4f743f3b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6f645403654d5623
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80b0a060a000801
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30a0a080b0a06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60d000500070305
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4cd804
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x4cd837
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4cd85e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4cd7e7
jmp 0x4cd852
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f380
mov eax, edi
mov ecx, 0xe
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004cd780
Function at 0x4cec20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ced28
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb165d296b87488a1
mov qword [rsp + 0x18], rdx
movabs rdx, 0x69be5bb2b165d296
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57e0457565747d9b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10000103010c0812
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd100a070405080a
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0801040d100a07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x71209000d010012
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cecc0
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffcb
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4cecf1
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ced1b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffcb
add r8d, edx
cmp rsi, 0x14
jb 0x4ceca5
jmp 0x4ced0f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004cec20
Function at 0x4d08e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d09bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7472675845717847
mov qword [rsp + 0x19], rdx
movabs rdx, 0x746f4f3a70706874
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20e03030a0b040a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb050108050c0e0c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d0955
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x12]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x12]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4d0988
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d09af
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xf
jb 0x4d0938
jmp 0x4d09a3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f380
mov eax, edi
mov ecx, 0xf
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.004d08e0

Function at 0x4d1160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d122b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe734b1c0d4c6503
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x524e
movabs rdx, 0x400080500070303
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7030209
xor eax, eax
jmp 0x4d11c6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x35]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x35]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4d11f7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4d121e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4d11a9
jmp 0x4d1212
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f380
mov eax, edi
mov ecx, 0xa
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004d1160
Function at 0x4d1680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1768
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa7765aed9a6b44d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65ae8ef6830a7765
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20a0309040a0201
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb09020a0309040a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x108090b080b0704
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d1701
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x52
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x4d1732
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d175b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x52
add r8d, edx
cmp rsi, 0xd
jb 0x4d16e7
jmp 0x4d174f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f380
mov eax, edi
mov ecx, 0xd
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004d1680

Function at 0x4d18e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d19bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf245334a34654f4f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x733a56f245334a34
mov qword [rsp + 0x22], rdx
movabs rdx, 0x709040805080507
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x706010103040709
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d1955
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4d1988
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d19af
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4d1938
jmp 0x4d19a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.004d18e0
Function at 0x4d19e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1b06
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x605c7568626d706b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x651b5f514b9b524d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6974651b5f514b9b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7375747474536e6f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0e090806070c0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x30f0c0e09080607
mov qword [rsp + 0x38], rdx
movabs rdx, 0x160a0e0400080116
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0400030d0f030b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160c020606060208
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d1aa0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x22
jge 0x4d1acd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4d1af4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4d1a83
jmp 0x4d1ae8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f380
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004d19e0

Function at 0x4d25a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2688
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x254408766f220c28
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6f9686cf0e6f6572
mov qword [rsp + 0x22], rdx
movabs rdx, 0x200020d0c070f01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0a0a0e00050200
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10a0b0701010a0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d2621
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x3d
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d2652
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d267b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x3d
add r8d, edx
cmp rsi, 0x10
jb 0x4d2607
jmp 0x4d266f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004d25a0
Function at 0x4d3b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3c06
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x21266e41485b5553
mov qword [rsp + 0x18], rdx
movabs rdx, 0x66300e5521266e41
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x343e3f383e6d5e08
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc020d0710090807
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10010a0608020f09
mov qword [rsp + 0x34], rdx
movabs rdx, 0x211111110010a06
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60a090804130112
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d3ba0
movzx r9d, byte [rsp + rsi + 0x18]
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax + rax]
cmp rax, 0x1c
jge 0x4d3bcd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d3bf4
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, edx
cmp rsi, 0x14
jb 0x4d3b85
jmp 0x4d3be8
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004d3b00

Function at 0x4d3c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3d0b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x13615a16080d061c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x730d2208b7fe505e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8030b040c010305
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30408030b040c01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70d080e0a000402
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d3ca4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x6c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x6c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4d3cd7
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4d3cfe
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4d3c87
jmp 0x4d3cf2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004d3c20