joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4cd960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cda18
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x82492565959a19a5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7020300050301
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x702
xor eax, eax
jmp 0x4cd9b8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4cd9e8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4cda0b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4cd99b
jmp 0x4cd9ff
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004cd960

Function at 0x4cda40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdb12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xef9c7b99adf19f80
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x659fcdef9c7b99ad
mov qword [rsp + 0x22], rdx
movabs rdx, 0x203040807020202
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x406010900050203
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cdaac
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4cdade
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cdb05
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0xb
jb 0x4cda92
jmp 0x4cdaf5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cda40

Function at 0x4cf8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf97d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9670708384886746
mov qword [rsp + 0x18], rdx
movabs rdx, 0x815d706157739670
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb07050d09060604
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4010b07050d0906
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50b03090d0c0502
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4cf920
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4cf94d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cf970
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4cf902
jmp 0x4cf964
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004cf8a0
Function at 0x4cf9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cfa9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf160de45654a72ea
mov qword [rsp + 0x19], rdx
movabs rdx, 0xcb6edae5fbc172f1
mov qword [rsp + 0x20], rdx
movabs rdx, 0xdb73356eaa40e961
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0c160014111211
mov qword [rsp + 0x30], rdx
movabs rdx, 0x101412020f090510
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb09111600000906
mov qword [rsp + 0x40], rdx
movabs rdx, 0x141111071200070a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4cfa40
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4cfa6d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4cfa90
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4cfa1f
jmp 0x4cfa84
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004cf9a0

Function at 0x4d03a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d048a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x653f6947685f6540
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x57653f6947685f65
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3860656356675074
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4000400080c0310
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x41004000400080c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60f0b0502020f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d042d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4d045a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4d047d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4d0410
jmp 0x4d0471
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d03a0
Function at 0x4d0d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0e2a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb38d9696809a65b2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x69999ab4b38d9696
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa078ae73a48e7a62
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf0d0c00060a030c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9020606050e0704
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11071108130c040d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d0dcd
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x4d0dfa
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d0e1d
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d0db0
jmp 0x4d0e11
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d0d40

Function at 0x4d1620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d172c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4a9f0ebd2ea17847
mov qword [rsp + 0x19], rdx
movabs rdx, 0x656d61c7bc9bb0bd
mov qword [rsp + 0x21], rdx
movabs rdx, 0xbe656d61c7bc9bb0
mov qword [rsp + 0x22], rdx
movabs rdx, 0xafb51b64cfaf2eab
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x610070108170313
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa12130712080501
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x14160a0813090a12
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb1114040c020118
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d16c8
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4d16fc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4d171f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x19
jb 0x4d16ae
jmp 0x4d1713
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d1620
Function at 0x4d19e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1abd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7c6778764c716847
mov qword [rsp + 0x18], rdx
movabs rdx, 0x52576d619268856c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb02040b0b020b01
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80201080505070f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80f02090b0e050f
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d1a60
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4d1a8d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d1ab0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4d1a42
jmp 0x4d1aa4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d19e0

Function at 0x4d1ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1bc6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xbf91cc3ab0e5d4d9
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd7d7347264a6bf91
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x101020207030b05
mov qword [rsp + 0x26], rdx
movabs rdx, 0x506010102020703
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0d080005000004
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4d1b60
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x75]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4d1b92
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d1bb7
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x75]
cmp rsi, 0xe
jb 0x4d1b42
jmp 0x4d1bab
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d1ae0
Function at 0x4d1be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1ce8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdb1f7fbd4b2f9d5
mov qword [rsp + 0x19], rdx
movabs rdx, 0x123a6cb57c6fc800
mov qword [rsp + 0x21], rdx
movabs rdx, 0x69123a6cb57c6fc8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x730d74d5c7cd9dca
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1209050b010f0206
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf15080b0f071704
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb130e1300170f15
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30c141105110104
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d1c8b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4d1cb8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d1cdb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4d1c6e
jmp 0x4d1ccf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d1be0

Function at 0x4d2200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d22c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x31d94f164974eb45
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x1746646e
movabs rdx, 0x405070b0b010604
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3010a0b07060005
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d2268
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4d2297
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4d22ba
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d224b
jmp 0x4d22ae
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d2200
Function at 0x4d2d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2e46
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4f59464751366f56
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x3a
movabs rdx, 0x706080000040206
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7030406
xor eax, eax
nop
jmp 0x4d2de0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4d2e12
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d2e37
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 9
jb 0x4d2dc2
jmp 0x4d2e2b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d2d80

Function at 0x4d3620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d36fd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x998a1893aa630750
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9a9a7865d032998a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9070107050d0c0c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0d09070107050d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x609020704030c03
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4d36a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4d36cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d36f0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d3682
jmp 0x4d36e4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d3620
Function at 0x4d3f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d404c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5e7364545e744a72
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x60407259
movabs rdx, 0x604090a00000108
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90307070001070b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d3fe5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xd]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d401c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4d403f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xd]
cmp rsi, 0xc
jb 0x4d3fcb
jmp 0x4d4033
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d3f80

Function at 0x4d50e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d51cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x347235148553c53
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x666e494e03472351
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4c162440416d722f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x12041005010c0511
mov qword [rsp + 0x30], rdx
movabs rdx, 0x130408011307110f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6041013080c0205
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d516a
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d519c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d51bf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 0x14
jb 0x4d5150
jmp 0x4d51b3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d50e0
Function at 0x4d51e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d52b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7ab16e69a1726554
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7b8a65977572816c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0c0908030b060b
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf070e07070b0303
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4d524c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d527e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d52a5
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x21]
cmp rsi, 0x10
jb 0x4d5232
jmp 0x4d5295
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d51e0

Function at 0x4d52c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5392
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xae69eac0ccf557e6
mov qword [rsp + 0x19], rdx
movabs rdx, 0x656cc1e466d7ebae
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0b0105050d0802
mov qword [rsp + 0x28], rdx
movabs rdx, 0x400050304090709
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d532c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d535e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d5385
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0xf
jb 0x4d5312
jmp 0x4d5375
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d52c0
Function at 0x4d53a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d54bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x72505cab61647355
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x64acae72d2e9ddd8
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4164acae72d2e9dd
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc65875c9ced4da74
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa121704040e1518
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50b0a121704040e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb1401130417080e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe010e040b0d0b0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd08090e0a0d0413
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d5460
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4d548d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d54b0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4d543d
jmp 0x4d54a4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d53a0

Function at 0x4d58a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d599d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x305b6c5441026558
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x61574561305b6c54
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20536669546b536f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb13020b070d130b
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa0508020d040f02
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1313100d0b120a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11111308120600
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5940
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4d596d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d5990
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d591f
jmp 0x4d5984
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d58a0
Function at 0x4d5ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5ddd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x9c7ebe12a96c6bff
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa9ba738191a79c7e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc2c6af6283751788
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100150500040a0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d0d14090e0108
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0107050a130415
mov qword [rsp + 0x40], rdx
movabs rdx, 0x606081515011103
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5d80
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x12]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x12]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4d5dad
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d5dd0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d5d5f
jmp 0x4d5dc4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d5ce0

Function at 0x4d5e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5edd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd991916bb9bbe00
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57e4174a02610d99
mov qword [rsp + 0x24], rdx
movabs rdx, 0x50209090a090c0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x406010605020909
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100000305070909
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d5e80
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4d5ead
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d5ed0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d5e62
jmp 0x4d5ec4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d5e00