joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b6220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b630c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf4be52b845acb947
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb4a6f4be52b845ac
mov qword [rsp + 0x20], rdx
movabs rdx, 0xdd81f1246f72b6bb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80b050b04060e04
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf10080110070407
mov qword [rsp + 0x38], rdx
movabs rdx, 0x904100f11100a02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b62aa
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b62dc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b62ff
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 0x12
jb 0x4b6290
jmp 0x4b62f3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00450f00
mov eax, edi
mov ecx, 0x12
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b6220

Function at 0x4b6860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6946
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x375938754f4a455d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2a656d475a335f33
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0c010907020302
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3080f0302090f08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a060206090005
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b68e0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x4b6912
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b6937
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 0x10
jb 0x4b68c2
jmp 0x4b692b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f00
mov eax, edi
mov ecx, 0x10
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b6860
Function at 0x4b8720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8806
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4c52646928325053
mov qword [rsp + 0x19], rdx
movabs rdx, 0x352f4046344c5264
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0301010c0a03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x808000a0301010c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x108070b02010605
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4b87a0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b87d2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b87f7
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0xd
jb 0x4b8782
jmp 0x4b87eb
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00450f00
mov eax, edi
mov ecx, 0xd
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b8720

Function at 0x4b8820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b88dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x656c364c3276234d
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x57
movabs rdx, 0x103040105010403
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x405
xor eax, eax
nop
jmp 0x4b8880
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4b88ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b88d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4b8862
jmp 0x4b88c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00450f00
mov eax, edi
mov ecx, 9
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004b8820
Function at 0x4b9500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b95dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa7441403beb08b52
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd139e6f93632806
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd080b0901050905
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0f080207050d08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x405080e03080109
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b9580
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4b95ad
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b95d0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b9562
jmp 0x4b95c4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f00
mov eax, edi
mov ecx, 0x10
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004b9500

Function at 0x4bb480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb546
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf9ee92de0f937257
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x85
movabs rdx, 0x608050403030502
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6060207
xor eax, eax
nop
jmp 0x4bb4e0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4bb512
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4bb537
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 9
jb 0x4bb4c2
jmp 0x4bb52b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00450f00
mov eax, edi
mov ecx, 9
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004bb480

Function at 0x4bb560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb618
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb5b2e9191d632541
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x701070703050605
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
jmp 0x4bb5b8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4bb5e8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bb60b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4bb59b
jmp 0x4bb5ff
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00450f00
mov eax, edi
mov ecx, 8
call fcn.00450f00
nop
call fcn.0044ec80
nop dword [rax]
jmp fcn.004bb560
Function at 0x4be1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be267
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6eea7273e274dc53
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe36d616eea7273e2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1040a00010a05
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x103060a
xor eax, eax
jmp 0x4be208
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4be237
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4be25a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4be1eb
jmp 0x4be24e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00450f00
mov eax, edi
mov ecx, 0xb
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004be1a0

Function at 0x4be280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be346
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x522d636f4f744755
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x2864
movabs rdx, 0x800080609080701
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3060707
xor eax, eax
jmp 0x4be2e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4be312
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4be337
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0xa
jb 0x4be2c3
jmp 0x4be32b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00450f00
mov eax, edi
mov ecx, 0xa
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004be280

Function at 0x4ccdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cce78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xdb20baeda3d66fa6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x700060307060004
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x50205
xor eax, eax
jmp 0x4cce19
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x4cce48
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4cce6b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop
cmp rsi, 8
jb 0x4ccdfc
jmp 0x4cce5f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00450f00
mov eax, edi
mov ecx, 8
call fcn.00450f00
nop
call fcn.0044ec80
nop dword [rax]
jmp fcn.004ccdc0
Function at 0x4cdb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdc6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x749f9f0e4e6475e6
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa4e861749f9f0e4e
mov qword [rsp + 0x22], rdx
movabs rdx, 0xed8b6954e8f0728e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30e0a0b060506
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1212060900110003
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd00041104000b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cdc0d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4cdc3a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4cdc5d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4cdbf0
jmp 0x4cdc51
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00450f00
mov eax, edi
mov ecx, 0x13
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004cdb80

Function at 0x4cdc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdd9a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x72b0d541afd41dcc
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8c697237accf6c20
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc65061c65320618c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe224d7c3e144e015
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1918151e1c0c0103
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1e1e081c1d1a1918
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b1b0f0a17020000
mov qword [rsp + 0x48], rdx
movabs rdx, 0x505041a02170416
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1318061c0b03160b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4cdd37
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x26
jge 0x4cdd69
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4cdd8d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7d]
cmp rsi, 0x1f
jb 0x4cdd1d
jmp 0x4cdd81
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.00440c20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00450f00
mov eax, edi
mov ecx, 0x1f
call fcn.00450f00
nop
call fcn.0044ec80
nop
jmp fcn.004cdc80
Function at 0x4cf880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf96a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x745e206b69556142
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf4504b745e206b69
mov qword [rsp + 0x22], rdx
movabs rdx, 0x456d66545b647261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10080a0804090a09
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe040a0612121008
mov qword [rsp + 0x38], rdx
movabs rdx, 0x608100912120208
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cf90d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4cf93a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4cf95d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4cf8f0
jmp 0x4cf951
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00450f00
mov eax, edi
mov ecx, 0x13
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004cf880

Function at 0x4d11c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d12ac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x208653a8a9342143
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd928208653a8a934
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe56de75420647261
mov qword [rsp + 0x38], rdx
movabs rdx, 0x611090402080403
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x709061109040208
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1060304010f1104
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4d124a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x4d127c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d129f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x12
jb 0x4d1230
jmp 0x4d1293
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00450f00
mov eax, edi
mov ecx, 0x12
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004d11c0
Function at 0x4d2360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d245d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20d2d3d1c77a61bf
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64d21f74b020d2d3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbe84d39141b7c40c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x302000d0814080a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x100503060b040e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x101100100503060b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x13120f0013100511
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d2400
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4d242d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d2450
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4d23df
jmp 0x4d2444
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00450f00
mov eax, edi
mov ecx, 0x15
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004d2360
Function at 0x4d33a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d348c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2e530a6e08063959
mov qword [rsp + 0x19], rdx
movabs rdx, 0x77fe612e530a6e08
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x116d6954204ac336
mov qword [rsp + 0x24], rdx
movabs rdx, 0x307070a0d0c0509
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x702050d0307070a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x120b07010909030b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d342a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4d345c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d347f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0x13
jb 0x4d3410
jmp 0x4d3473
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00450f00
mov eax, edi
mov ecx, 0x13
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004d33a0

Function at 0x4d3b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3c0a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd91e636962297441
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x646e14ffd91e6369
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe56d690b10017261
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80f0e0e08010f08
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8081007080f0e0e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8020f1309100601
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4d3bad
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x4d3bda
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d3bfd
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d3b90
jmp 0x4d3bf1
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00450f00
mov eax, edi
mov ecx, 0x14
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004d3b20
Function at 0x4d5e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5f48
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x73c3f158cf676641
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e1474fa4729a4f7
mov qword [rsp + 0x21], rdx
movabs rdx, 0x76e1474fa4729a4
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc104ea5420b4b9b4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80910120b090504
mov qword [rsp + 0x32], rdx
movabs rdx, 0x17110e050b181608
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc17130e060b1711
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1017080b030e10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5eeb
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4d5f18
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d5f3b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4d5ece
jmp 0x4d5f2f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00440c20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00450f00
mov eax, edi
mov ecx, 0x19
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004d5e40

Function at 0x4d6220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d631b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x686b615a69656576
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5f6e60743420686b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3b797a3a38647215
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20d150d13140100
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe1104070e0e0513
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x602040e0e110407
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe040b0706120912
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d62b9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x16]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4d62eb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d630e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x16]
cmp rsi, 0x16
jb 0x4d629f
jmp 0x4d6302
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.00440c20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00450f00
mov eax, edi
mov ecx, 0x16
call fcn.00450f00
nop
nop dword [rax + rax]
call fcn.0044ec80
jmp fcn.004d6220
Function at 0x4d73a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d748a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6174ee353199ab21
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x38166174ee353199
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc230e2542b2c1637
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100c0405020b0c11
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30808050b011009
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0f0b040003010a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d742d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4d745a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d747d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4d7410
jmp 0x4d7471
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00450f00
mov eax, edi
mov ecx, 0x12
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004d73a0

Function at 0x4d78c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d79aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf211bd91cf729a4b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646e61f211bd91cf
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc26dd112bd641861
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4030e0504040403
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc060612070f0403
mov qword [rsp + 0x38], rdx
movabs rdx, 0x306100601030610
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d794d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4d797a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d799d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d7930
jmp 0x4d7991
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00450f00
mov eax, edi
mov ecx, 0x13
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004d78c0