joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d68a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d69b3
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa4a651d61ed1e43
mov qword [rsp + 0x18], rdx
movabs rdx, 0x361e0a4a651d61ed
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3e4b513677bf5145
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0e02040b081109
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa01070b10100f0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb060604020b020c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d6930
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d696d
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
nop
cmp rsi, 0x16
jae 0x4d69a5
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d6994
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0x12
jb 0x4d6916
jmp 0x4d6988
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456360
mov eax, edi
mov ecx, 0x12
nop dword [rax + rax]
call fcn.00456360
mov rax, rsi
mov ecx, 0x16
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004d68a0

Function at 0x4d6dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6ebf
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x33bc4798702de143
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8a6fd6e2ce4233bc
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd01060601080107
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x406020a0d010606
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9040a0b060a0401
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d6e41
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4d6e7d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x4d6eb1
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d6ea5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0xe
jb 0x4d6e27
jmp 0x4d6e98
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
nop
call fcn.00456360
mov eax, edi
mov ecx, 0xe
call fcn.00456360
mov rax, rsi
mov ecx, 0x14
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004d6dc0
Function at 0x4d90e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9209
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x727593656d8ba088
mov qword [rsp + 0x19], rdx
movabs rdx, 0xda6c73ff73d773a0
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7470a4da6c73ff73
mov qword [rsp + 0x24], rdx
movabs rdx, 0xaabf676e65bc7296
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50c091505020b08
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa10100f19091905
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x205000e0a10100f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0313010b1a1009
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d9191
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1c
jge 0x4d91c8
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x4d91fb
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4d91ef
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4d9174
jmp 0x4d91e3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.00443880
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00456360
mov eax, edi
mov ecx, 0x1b
call fcn.00456360
mov rax, rsi
mov ecx, 0x1c
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004d90e0

Function at 0x4d9780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d98d3
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6b8b6365896d7b53
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6e6b73455e478726
mov qword [rsp + 0x20], rdx
movabs rdx, 0x527252415a5b6e6b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x506f11742c75587b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1016120107030209
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1b0f010706011609
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x161d1b0f01070601
mov qword [rsp + 0x40], rdx
movabs rdx, 0x18180c0e110a081d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x19000e0b060a0f11
mov qword [rsp + 0x50], rdx
movabs rdx, 0x171d09130911170a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4d984c
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4d988d
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 0x2a
jae 0x4d98c5
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4d98b4
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1e]
cmp rsi, 0x1e
jb 0x4d9832
jmp 0x4d98a8
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.00443880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00456360
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.00456360
mov rax, rsi
mov ecx, 0x2a
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004d9780
Function at 0x4da660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da76b
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc356b3bf974651f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x66f8e50c356b3bf9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x352c1a744859491f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb07040610110409
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8080800030b07
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0b08120c07110d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4da6f3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4da72a
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x4da75d
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4da751
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4da6d6
jmp 0x4da745
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00443880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456360
mov eax, edi
mov ecx, 0x13
call fcn.00456360
mov rax, rsi
mov ecx, 0x16
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004da660

Function at 0x4db260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db340
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x532e30f838ee7349
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xbc0
movabs rdx, 0x208050306040906
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8060602
xor eax, eax
jmp 0x4db2c3
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x4db2ff
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x4db332
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4db326
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0xa
jb 0x4db2a9
jmp 0x4db31a
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00443880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456360
mov eax, edi
mov ecx, 0xa
call fcn.00456360
mov rax, rsi
mov ecx, 0xc
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004db260
Function at 0x4db360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db45f
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x24bf6c1920fc6fd7
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd369f5ef776f24bf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2060004030107
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60d000206000403
mov qword [rsp + 0x28], rdx
movabs rdx, 0x607060a07070b06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4db3e4
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x4db41b
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x4db451
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4db445
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4db3c7
jmp 0x4db436
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00443880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00456360
mov eax, edi
mov ecx, 0xe
call fcn.00456360
mov rax, rsi
mov ecx, 0x12
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004db360

Function at 0x4dc400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc533
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xfa0b10a43e171a07
mov qword [rsp + 0x18], rdx
movabs rdx, 0x974ee2b63e371a5
mov qword [rsp + 0x20], rdx
movabs rdx, 0xfbea0974ee2b63e3
mov qword [rsp + 0x22], rdx
movabs rdx, 0x57656997d46843f7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10061600030c0f12
mov qword [rsp + 0x32], rdx
movabs rdx, 0x5010308040c0804
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa00170d02020501
mov qword [rsp + 0x40], rdx
movabs rdx, 0x708150d11041109
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dc4ae
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4dc4ed
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1e
jae 0x4dc525
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4dc514
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
cmp rsi, 0x1a
jb 0x4dc494
jmp 0x4dc508
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00443880
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456360
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00456360
mov rax, rsi
mov ecx, 0x1e
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004dc400
Function at 0x4dce60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dcf6b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2365575947653559
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x643b625e23655759
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3c6a5b69666e6f68
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7090a000501110b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1209030307090a00
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0813081103040a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4dcef3
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x24]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x24]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x4dcf2a
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x4dcf5d
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4dcf51
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4dced6
jmp 0x4dcf45
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456360
mov eax, edi
mov ecx, 0x14
call fcn.00456360
mov rax, rsi
mov ecx, 0x14
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004dce60

Function at 0x4de5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de6ff
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc3998b731131a497
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6e8876c0c3998b73
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x888a6372786f697b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1070f080a130803
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd1302000c120202
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf000d1302000c12
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf050601030f05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4de680
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4de6bc
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4de6f1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4de6e5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0x14
jb 0x4de665
jmp 0x4de6d7
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00443880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
nop
call fcn.00456360
mov eax, edi
mov ecx, 0x14
call fcn.00456360
mov rax, rsi
mov ecx, 0x1a
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004de5e0
Function at 0x4e08c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e09bf
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xc257ea65b61365e6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf0bfb65d79ba69c2
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd020c0500060b06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0e090d0d020c05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x706000c0b06030e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e0941
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4e097d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x4e09b1
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4e09a5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 0xf
jb 0x4e0927
jmp 0x4e0998
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop
call fcn.00456360
mov eax, edi
mov ecx, 0xf
call fcn.00456360
mov rax, rsi
mov ecx, 0x14
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004e08c0

Function at 0x4e2500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e263f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6cb208448aa76515
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7228ef650d22a769
mov qword [rsp + 0x27], rdx
movabs rdx, 0x74ecb8d56680ca72
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa753b4fdd56fbbb2
mov qword [rsp + 0x36], rdx
movabs rdx, 0x21c1b1a13100e17
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1706021c1b1a1310
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd060b0d151d000d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e141d0a05000015
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11181d180300091a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e25c0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4e25fc
movzx edx, byte [rsp + rax + 0x3e]
lea rsi, [rax + 1]
cmp rsi, 0x22
jae 0x4e2631
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4e2625
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x1f
jb 0x4e25a3
jmp 0x4e2617
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1f
call fcn.00443880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
nop
call fcn.00456360
mov eax, edi
mov ecx, 0x1f
call fcn.00456360
mov rax, rsi
mov ecx, 0x22
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004e2500
Function at 0x4e32e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e33eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4f1a1e4650426543
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x614f1a1e46504265
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd73720733d4e4978
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa06020e0c0f0f10
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0305100a06020e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8100b0a03070202
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e3373
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4e33aa
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x4e33dd
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4e33d1
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4e3356
jmp 0x4e33c5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456360
mov eax, edi
mov ecx, 0x11
call fcn.00456360
mov rax, rsi
mov ecx, 0x14
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004e32e0

Function at 0x4e3400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e351f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe542c546fd72bdce
mov qword [rsp + 0x18], rdx
movabs rdx, 0x634e6600cad91002
mov qword [rsp + 0x20], rdx
movabs rdx, 0xfb658b68fb757402
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe08070a03160006
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1080b130a0a0900
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16170c03120e15
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150e0a1600051003
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e34a2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x20
jge 0x4e34d9
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x4e3511
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e3505
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x4e3485
jmp 0x4e34f4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00443880
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00456360
mov eax, edi
mov ecx, 0x18
call fcn.00456360
mov rax, rsi
mov ecx, 0x20
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004e3400
Function at 0x4e5860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e597f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xee10e17df430e350
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3915ee10e17df430
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x75fb6f3753743810
mov qword [rsp + 0x26], rdx
movabs rdx, 0x801071006071107
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30a060e040e050b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb11030a060e040e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8020a0707060e09
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e5900
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4e593c
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4e5971
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e5965
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x12
jb 0x4e58e5
jmp 0x4e5957
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00443880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
nop
call fcn.00456360
mov eax, edi
mov ecx, 0x12
call fcn.00456360
mov rax, rsi
mov ecx, 0x1a
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004e5860

Function at 0x4e5cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5d9f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x79848375a4768744
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x9a5f
movabs rdx, 0x309050206090606
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9020601
xor eax, eax
jmp 0x4e5d26
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4e5d5d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x4e5d91
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4e5d85
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4e5d09
jmp 0x4e5d78
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00443880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00456360
mov eax, edi
mov ecx, 0xa
call fcn.00456360
mov rax, rsi
mov ecx, 0xc
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004e5cc0
Function at 0x4e6fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e708d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc6d34865a49dcbc9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x91d638c6d34865a4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8010803080a0200
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6070901030a0801
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e7015
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4e704c
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x4e707f
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4e7073
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4e6ff8
jmp 0x4e7067
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00443880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456360
mov eax, edi
mov ecx, 0xb
call fcn.00456360
mov rax, rsi
mov ecx, 0xe
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004e6fa0

Function at 0x4e9f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea033
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x8d50656565788844
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x646c65675c78787c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7f52793f41646c65
mov qword [rsp + 0x28], rdx
movabs rdx, 0x777376886774576d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x21b1901041b141a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc180b151619081c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe130104090b0107
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110a121302140a0c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e9fae
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4e9fed
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x20
jae 0x4ea025
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ea014
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0x1d
jb 0x4e9f94
jmp 0x4ea008
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00443880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456360
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.00456360
mov rax, rsi
mov ecx, 0x20
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004e9f00