joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c81c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c82a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb19cea633506df15
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb659dba35772ad73
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50f010c03070302
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20d0f000d00050f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d0e09020c060b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c8240
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4c8272
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c8297
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x10
jb 0x4c8222
jmp 0x4c828b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004c81c0

Function at 0x4c9a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9b12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x82edeeefad20e275
mov qword [rsp + 0x19], rdx
movabs rdx, 0x73de68eef9726382
mov qword [rsp + 0x20], rdx
movabs rdx, 0x804000c0a030703
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50d0600040c0b01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c9aac
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c9ade
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c9b05
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0xf
jb 0x4c9a92
jmp 0x4c9af5
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0xf
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004c9a40
Function at 0x4ca140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca22a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x69b963656e8f6ff6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfb206efd69b96365
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1cc11399abe92345
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10060c000f10100e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80b120f08021006
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd13110e000e120f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ca1cd
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4ca1fa
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ca21d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4ca1b0
jmp 0x4ca211
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461b40
mov eax, edi
mov ecx, 0x14
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004ca140

Function at 0x4cafe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb107
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xca037275f1e4fbff
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x616f9cb26d08f36c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6108c5bc0bc969d0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa71820103e123928
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc09100a07021319
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20a191b1c001f0d
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1a0e03011508020a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1215060a14130215
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a161f1b19161e0d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x13181d0602161509
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4cb0a9
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2e
jge 0x4cb0d7
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x4cb0fa
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x20
jb 0x4cb08c
jmp 0x4cb0ee
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.0044c140
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461b40
mov eax, edi
mov ecx, 0x20
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004cafe0
Function at 0x4cc260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc32c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6975954682688c69
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c90707a
movabs rdx, 0xa0a030405090501
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80301080a060a0a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cc2c5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4cc2fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4cc31f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0xc
jb 0x4cc2ab
jmp 0x4cc313
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461b40
mov eax, edi
mov ecx, 0xc
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004cc260

Function at 0x4cc5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc65d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbd408787a564747a
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x6c
movabs rdx, 0x6060505070300
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x40706
xor eax, eax
nop
jmp 0x4cc600
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4cc62d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4cc650
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4cc5e2
jmp 0x4cc644
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461b40
mov eax, edi
mov ecx, 9
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004cc5a0
Function at 0x4ceda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ceebd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xbeda6441b09565bb
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x441f69e3c9d29ca4
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd6cdbbb66f539d8d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x65a46fb720c0ae8a
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe12140306090f02
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe1e18000e121403
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b1b090c0a1b0710
mov qword [rsp + 0x48], rdx
movabs rdx, 0x191108081a15021e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x912160b170a1e1c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4cee60
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4cee8d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4ceeb0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x4cee3d
jmp 0x4ceea4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.0044c140
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461b40
mov eax, edi
mov ecx, 0x20
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004ceda0

Function at 0x4cf0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf1ac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x616572db05724334
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf9fc2672012ef011
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4034669f9fc2672
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9b2e44156e6fcca9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x18151301151b120a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14090e0011181a0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x191a1b141b040900
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1108000b030a010d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4cf148
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x20
jge 0x4cf17c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4cf19f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x1c
jb 0x4cf12e
jmp 0x4cf193
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461b40
mov eax, edi
mov ecx, 0x1c
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004cf0a0
Function at 0x4d1ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1dbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8c3dcef6c707fe3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x658f966e9c92b108
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40a090507060708
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0d0a0d040a0905
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100090107080800
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d1d60
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4d1d8d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d1db0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4d1d42
jmp 0x4d1da4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461b40
mov eax, edi
mov ecx, 0xf
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004d1ce0

Function at 0x4d1f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1fdd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf3372a43643290f5
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x2020501050007
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x607
xor eax, eax
nop
jmp 0x4d1f80
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4d1fad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d1fd0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4d1f62
jmp 0x4d1fc4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461b40
mov eax, edi
mov ecx, 9
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004d1f20
Function at 0x4d2d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2de6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd7011bf43270732
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57f73e1406726574
mov qword [rsp + 0x26], rdx
movabs rdx, 0x107010c0d0e0504
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0b0107010c0d0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100040d0501020c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d2d80
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4d2db2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d2dd7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x10
jb 0x4d2d62
jmp 0x4d2dcb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004d2d00

Function at 0x4d2e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2edd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x998597898094768c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9064995aed6c9985
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x406070907050a03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7040607090705
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa010b02050d0a00
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4d2e80
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4d2ead
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d2ed0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d2e62
jmp 0x4d2ec4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004d2e00
Function at 0x4d4180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4247
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x54a20a3b97cc65d7
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65704f54a20a3b97
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x408080602050306
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000806
xor eax, eax
jmp 0x4d41e8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4d4217
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4d423a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4d41cb
jmp 0x4d422e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461b40
mov eax, edi
mov ecx, 0xb
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004d4180

Function at 0x4d4920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d49e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc21206614c4a652c
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x72107250
movabs rdx, 0x20605080a050607
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2080200030a0206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d4988
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4d49b7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4d49da
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d496b
jmp 0x4d49ce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461b40
mov eax, edi
mov ecx, 0xc
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004d4920
Function at 0x4d5140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d522c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74f9ea68f8749e25
mov qword [rsp + 0x19], rdx
movabs rdx, 0x974f9ea68f8749e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc7d786fdeff5ff8d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9030e09010b0508
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0b060f000f0903
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0e0c10010c060a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d51ca
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d51fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4d521f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x11
jb 0x4d51b0
jmp 0x4d5213
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461b40
mov eax, edi
mov ecx, 0x11
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004d5140

Function at 0x4d5600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d56fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5a95f0fd79746e47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xec8cec9966205a95
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd872ee0461df7212
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x306080a0e0c1203
mov qword [rsp + 0x34], rdx
movabs rdx, 0x408130e03100914
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x140d0a010408130e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50912010a15060b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5699
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4d56cb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d56ee
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x16
jb 0x4d567f
jmp 0x4d56e2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461b40
mov eax, edi
mov ecx, 0x16
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.004d5600
Function at 0x4d61e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d629d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xcdc078acd9c86f94
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x57
movabs rdx, 0x602070306030500
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4020603
xor eax, eax
nop
jmp 0x4d6240
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4d626d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d6290
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4d6222
jmp 0x4d6284
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461b40
mov eax, edi
mov ecx, 9
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004d61e0

Function at 0x4d6b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6c1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x54723a11641265e2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe02dead74354723a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x570765231665f94c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0209000e0b090c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90a111013130409
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc070b08090a1110
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf101113090d0205
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d6bc0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4d6bed
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d6c10
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4d6b9f
jmp 0x4d6c04
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461b40
mov eax, edi
mov ecx, 0x15
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004d6b20
Function at 0x4d8600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d86cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe7fda4b74e37257
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf3656cbb730e7fda
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60c0c0405060202
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60902040709060c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d866f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4d869c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d86bf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x4d8652
jmp 0x4d86b3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004d8600

Function at 0x4d9560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d965b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7481866547796a78
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6f69667277637481
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6c67836272814e8d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90200080e111305
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x113060208131300
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1110011306020813
mov qword [rsp + 0x38], rdx
movabs rdx, 0x801001515080b14
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d95f9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d962b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d964e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0x16
jb 0x4d95df
jmp 0x4d9642
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461b40
mov eax, edi
mov ecx, 0x16
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.004d9560