joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c6740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6848
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6c73646a696f6e89
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5f8b3366697a3920
mov qword [rsp + 0x24], rdx
movabs rdx, 0x717b8a6e5f8b3366
mov qword [rsp + 0x28], rdx
movabs rdx, 0x647668848d6d7461
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a031601120c040f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1309011806160e17
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1217110e0f0d130d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120505030d010a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c67eb
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x1b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x1b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x20
jge 0x4c6818
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4c683b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4c67ce
jmp 0x4c682f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c6740

Function at 0x4c6ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6bfd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x65569a986f7a8d72
mov qword [rsp + 0x18], rdx
movabs rdx, 0x827a6f9872327477
mov qword [rsp + 0x20], rdx
movabs rdx, 0x618e7520668a64b2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x97737b9181876776
mov qword [rsp + 0x30], rdx
movabs rdx, 0x131b04111e11060f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1c0b1f0c1b1e1a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe19121d05041f19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1101a06110c020b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x16010a0813131d1e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c6ba0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4c6bcd
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4c6bf0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x4c6b7d
jmp 0x4c6be4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461020
mov eax, edi
mov ecx, 0x20
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004c6ae0
Function at 0x4c7640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c76fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3c451170612d3064
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x714
movabs rdx, 0x508080502070101
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x609
xor eax, eax
jmp 0x4c76a0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4c76cd
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4c76f0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4c7682
jmp 0x4c76e4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004c7640

Function at 0x4c84a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8572
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x91a4a49572b2c092
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xccaa6491a4a49572
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa05020506050907
mov qword [rsp + 0x28], rdx
movabs rdx, 0x702040105000105
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c850c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c853e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c8565
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x33]
cmp rsi, 0xb
jb 0x4c84f2
jmp 0x4c8555
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c84a0
Function at 0x4c8920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8a0c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3820ee16761b6f43
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4e29b7f725133820
mov qword [rsp + 0x38], rdx
movabs rdx, 0x57166960676edb72
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9020c0807040507
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x120a0b060d0f0902
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6140d0f0a0f0f0a
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4c89aa
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c89dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c89ff
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x16
jb 0x4c8990
jmp 0x4c89f3
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c8920

Function at 0x4c9d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9e27
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x253e6f4f43673150
mov qword [rsp + 0x19], rdx
movabs rdx, 0x792f4b253e6f4f43
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x104070600090106
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060600
xor eax, eax
jmp 0x4c9dc8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4c9df7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4c9e1a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c9dab
jmp 0x4c9e0e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c9d60
Function at 0x4ca0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca19d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x79720927fb670d42
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57793d254c04131d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa03080c0d010903
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90308040a03080c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90b000005000d03
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ca140
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4ca16d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ca190
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4ca122
jmp 0x4ca184
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ca0c0

Function at 0x4caba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cac9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe5b59891a390a343
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x762bd93e8729fb8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6eaea9ca4365add0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80e0f10060f140c
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd090709160b0e02
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x15050316060d0d09
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90f0c010d110407
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4cac40
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4cac6d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4cac90
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x4cac1f
jmp 0x4cac84
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004caba0
Function at 0x4cc7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc8b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5b986691615972a2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x70696c5b98669161
mov qword [rsp + 0x22], rdx
movabs rdx, 0x404060700020004
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa09090504070404
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cc84c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4cc87e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cc8a5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1a]
cmp rsi, 0xb
jb 0x4cc832
jmp 0x4cc895
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cc7e0

Function at 0x4cd260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd332
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1f226574fe657543
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8f110d0156f1f22
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6060a090d030106
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc060707090b0606
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4cd2cc
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x4cd2fe
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cd325
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0xe
jb 0x4cd2b2
jmp 0x4cd315
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cd260
Function at 0x4ceae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cebbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa30d6d6fdcf7d13d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5797b02b93ab5aa3
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10d0100030a080a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6080201010b010d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd02070c0c070902
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ceb60
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4ceb8d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cebb0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4ceb42
jmp 0x4ceba4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ceae0

Function at 0x4d0000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d010c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x37bc6cbbbec665db
mov qword [rsp + 0x36], rdx
movabs rdx, 0x697461ca726facc7
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x4a6f697461ca726f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0e4356561f079bc
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1417161418080308
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1214190200111907
mov qword [rsp + 0x24], rdx
movabs rdx, 0x400121419020011
mov qword [rsp + 0x26], rdx
movabs rdx, 0x309180c07060307
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4d00a8
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d00dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4d00ff
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0x1a
jb 0x4d008e
jmp 0x4d00f3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d0000
Function at 0x4d09e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0ab2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xed6c9d754674a7c2
mov qword [rsp + 0x28], rdx
movabs rdx, 0xeab96dc84e42ffe9
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0e0c0f090c0005
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe0101080c070e07
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4d0a4c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d0a7e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d0aa5
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
cmp rsi, 0x10
jb 0x4d0a32
jmp 0x4d0a95
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d09e0

Function at 0x4d1aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1b72
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcc7261a7530080b7
mov qword [rsp + 0x19], rdx
movabs rdx, 0x21c3be6e277075cc
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc07020001040d0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10a0e020c070e04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d1b0c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d1b3e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d1b65
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0xf
jb 0x4d1af2
jmp 0x4d1b55
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d1aa0
Function at 0x4d1ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1ddb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xba6771958d8c8c9e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7374817a8854b1ba
mov qword [rsp + 0x24], rdx
movabs rdx, 0x816d69b1a4966989
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x41104080c160f0b
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb120703010a1300
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x60b020b120703
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131213030d121305
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d1d79
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4d1dab
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d1dce
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0x17
jb 0x4d1d5f
jmp 0x4d1dc2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004d1ce0

Function at 0x4d1e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1ec7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3d613a6554586555
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x3f4b7661
movabs rdx, 0x506070002000b02
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa09020906070a0b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d1e68
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4d1e97
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4d1eba
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d1e4b
jmp 0x4d1eae
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d1e00
Function at 0x4d2ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2c7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe114c0650fe872e3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb2d2c6bb69c347e1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90e070c0d03080b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd080807090e070c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70707060b020005
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d2c20
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4d2c4d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d2c70
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4d2c02
jmp 0x4d2c64
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d2ba0

Function at 0x4d3080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d316a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3910cf44b0611152
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x792c0174223910cf
mov qword [rsp + 0x22], rdx
movabs rdx, 0x57734967f628fc2d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6100d0a0f010803
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0b0e050e080610
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8070b121206100f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d310d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x4d313a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d315d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4d30f0
jmp 0x4d3151
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d3080
Function at 0x4d3860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d395d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdfe360e0e08e6596
mov qword [rsp + 0x19], rdx
movabs rdx, 0x474dfca6d3f6fdf
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf565a0621269fee8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x909000b0a030f05
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf070c0c0f0c0b14
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe14061607070210
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc12100b0309040e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d3900
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4d392d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d3950
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4d38df
jmp 0x4d3944
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d3860

Function at 0x4d4280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d434c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x668a5a6d80806475
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x657769668a5a6d80
mov qword [rsp + 0x22], rdx
movabs rdx, 0x202090900040406
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x707000105030202
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d42ef
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4d431c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d433f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4d42d2
jmp 0x4d4333
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d4280