joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ce6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce792
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x3233854e618c7761
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xa26c848d
movabs rdx, 0x40101050209010b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x109010805090401
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ce72e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 1]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 1]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4ce75b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ce785
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ce711
jmp 0x4ce776
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004ce6c0

Function at 0x4ce940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cea0b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x50155c55485c5345
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x6c59
movabs rdx, 0x606040408050003
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2010107
xor eax, eax
jmp 0x4ce9a6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4ce9d7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4ce9fe
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4ce989
jmp 0x4ce9f2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457420
mov eax, edi
mov ecx, 0xa
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004ce940
Function at 0x4cee40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cef1c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2e533385a891857c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x816c7a2e533385a8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8060a0102000203
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1090a0604040a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ceeb2
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffe3
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ceee8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cef0f
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffe3
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4cee98
jmp 0x4cef03
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004cee40

Function at 0x4d0b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0c1c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x633d165047394261
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6e534e6f54297357
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0101000608000a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd030200080d0508
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4d0bb2
movzx r9d, byte [rsp + rsi + 0x28]
add r9d, 8
add edx, r9d
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d0be8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d0c0f
movzx r8d, byte [rsp + rdi + 0x28]
add r8d, 8
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0x10
jb 0x4d0b98
jmp 0x4d0c03
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004d0b40
Function at 0x4d1320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d140b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4b6e8261965b6583
mov qword [rsp + 0x19], rdx
movabs rdx, 0x57836e86894b6e82
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x404080a0009040b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa030404080a0009
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8000b0a03020305
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d13a4
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x4d13d7
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x4d13fe
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4d1387
jmp 0x4d13f2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457420
mov eax, edi
mov ecx, 0xd
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d1320

Function at 0x4d31e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d32c8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4365b361e3d8aff6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x205fd1d9c8d329d4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3030f0300000c02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd09090f00010303
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50b0d0f010b0a08
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d3261
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffff8c
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d3292
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d32bb
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffff8c
add r8d, edx
cmp rsi, 0x10
jb 0x4d3247
jmp 0x4d32af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d31e0
Function at 0x4d3ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3bd6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5a46010b61017c02
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfe765a46010b6101
mov qword [rsp + 0x20], rdx
movabs rdx, 0x570e910c702b777b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20c07010c0a0108
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb080f05100e080b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4080a0800010905
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d3b73
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4d3ba2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d3bc9
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4d3b56
nop
jmp 0x4d3bbd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457420
mov eax, edi
mov ecx, 0x12
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004d3ae0

Function at 0x4d3dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3e9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x613015493edf4ba4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x576b6e690be12661
mov qword [rsp + 0x20], rdx
movabs rdx, 0x900000302030104
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8050506000a0306
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d3e32
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x24
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d3e68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d3e8f
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x24
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xf
jb 0x4d3e18
jmp 0x4d3e83
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004d3dc0
Function at 0x4d4a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4b13
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe6e9dd7465fdc0fa
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6461656f01547afc
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd075777ce2646165
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7478ed4c65410ff9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x81b020b150c1116
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1013150712001708
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1309070910010614
mov qword [rsp + 0x48], rdx
movabs rdx, 0x161a090507070800
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d4aae
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x5e
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4d4adf
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4d4b06
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x5e
add r8d, edx
cmp rsi, 0x1d
jb 0x4d4a94
jmp 0x4d4afa
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457420
mov eax, edi
mov ecx, 0x1d
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d4a00

Function at 0x4d4b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4bfc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6fc8b2dc69a2db44
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c6ca39cc46fdc6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0206020d080c02
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb05020d02010b04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d4b95
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4d4bc8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d4bef
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xf
jb 0x4d4b78
jmp 0x4d4be3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004d4b20
Function at 0x4d4e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4f3c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4a6f455c6c5f7872
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7986704a6f455c6c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8030a0907030909
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x207040800050803
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d4ed2
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xfffffff3
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d4f08
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d4f2f
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xfffffff3
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4d4eb8
jmp 0x4d4f23
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004d4e60

Function at 0x4d5780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d586b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x65fb88fbe27dc5fb
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xde0769c066996f65
mov qword [rsp + 0x24], rdx
movabs rdx, 0x204000108000b0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60d0d0d02040001
mov qword [rsp + 0x30], rdx
movabs rdx, 0x604030e090e0503
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d5804
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x14
jge 0x4d5837
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4d585e
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4d57e7
jmp 0x4d5852
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d5780
Function at 0x4d5880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d595c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb84db2a06db69a46
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5789ad99c196b84d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70902020b020a05
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb070c0a09040108
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d58f5
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4d5928
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d594f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4d58d8
jmp 0x4d5943
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004d5880

Function at 0x4d6fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d70e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x41babeaf9d741909
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x726041babeaf9d74
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5780c574f46369cf
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80a0c010809050f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x906010009030a0c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd090601000903
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1000100304010603
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d7080
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffff9d
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4d70b1
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d70db
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffff9d
add r8d, edx
cmp rsi, 0x12
jb 0x4d7065
jmp 0x4d70cf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457420
mov eax, edi
mov ecx, 0x12
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d6fe0
Function at 0x4d74e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d75b2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x54436b560c3f5a47
mov qword [rsp + 0x19], rdx
movabs rdx, 0x55707954436b560c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1040a0202060302
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2050603
xor eax, eax
jmp 0x4d754e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4d757b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d75a5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4d7531
jmp 0x4d7596
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d74e0

Function at 0x4d75c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d76ab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3cc6161e461f1210
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbea16da9f668741c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0f0c0b0b0c0b07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8060e0f0c0b0b0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0001080e050402
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d7644
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4d7677
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4d769e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4d7627
jmp 0x4d7692
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d75c0
Function at 0x4d7c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7d2b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x748d647e73b1655b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9283637694976c74
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa00040d0b090e05
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2050a00040d0b09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60b000c03080503
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d7cc4
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x4d7cf7
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4d7d1e
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4d7ca7
jmp 0x4d7d12
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d7c40

Function at 0x4d8500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8646
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x38262cbd74b86e49
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc038262cbd74b86e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x728155c81072f718
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2490747412644c18
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x35d2320cd53e389f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x418060f09111f08
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x2180f0c1914171c
mov qword [rsp + 0x44], rdx
movabs rdx, 0xa1f1c0802180f0c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe20021f08070d0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x181b141b1e171b06
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b1a050d0c121d0c
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4d85e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x4d860d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4d8634
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x21
jb 0x4d85c2
jmp 0x4d8628
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.004446e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00457420
mov eax, edi
mov ecx, 0x21
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d8500
Function at 0x4d8660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8732
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf0ed69ee42c40ff4
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x202d2616
movabs rdx, 0x209000706000207
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6010a0304010b08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d86ce
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x4c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x4c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4d86fb
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4d8725
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d86b1
jmp 0x4d8716
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d8660

Function at 0x4d8d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8dc8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x729c6998658c6fda
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x57
movabs rdx, 0x600000402020706
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x207
xor eax, eax
jmp 0x4d8d63
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4d8d90
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d8dbb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4d8d46
jmp 0x4d8daf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457420
mov eax, edi
mov ecx, 9
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004d8d00
Function at 0x4d91e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d92bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6b73386e56465b85
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x614378685e326b73
mov qword [rsp + 0x20], rdx
movabs rdx, 0x705040704000d03
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc010a02090309
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d9252
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xfffffff3
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d9288
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d92af
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xfffffff3
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xe
jb 0x4d9238
jmp 0x4d92a3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004d91e0