joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c51a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c52ba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x73204953030d7d3e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xf1d3bd36261b22ee
mov qword [rsp + 0x46], rdx
movabs rdx, 0x9514f1d3bd36261b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65d9aba48b94959a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1603171001090213
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x90d0d0e16031710
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc110a0d0b120318
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf140c000b121214
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1102080e08150c10
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4c5257
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x24
jge 0x4c5289
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4c52ad
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0x1a
jb 0x4c523d
jmp 0x4c52a1
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456420
mov eax, edi
mov ecx, 0x1a
call fcn.00456420
nop
call fcn.00454140
nop
jmp fcn.004c51a0

Function at 0x4c52e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c53ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1b614cc2eb112a3f
mov qword [rsp + 0x37], rdx
movabs rdx, 0x611b614cc2eb112a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1f13f9d51b694c76
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70c0c0d01040f10
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x70e0f03010c0203
mov qword [rsp + 0x27], rdx
movabs rdx, 0x50d0c05000a0510
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4c536d
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x4c539a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c53bd
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x4c5350
jmp 0x4c53b1
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c52e0
Function at 0x4c54c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c55ac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x72cf262ce3659f11
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xdf72cf262ce3659f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd36f21d01720d5e0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x103090608040e10
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa050c030d030103
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9000e0105050d06
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4c554a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x33]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c557c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c559f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x33]
cmp rsi, 0x11
jb 0x4c5530
jmp 0x4c5593
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c54c0

Function at 0x4c59a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5a9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x73ba27fcfbbf0e6c
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x6e656501b973ba27
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc874b36516656716
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40e090308130405
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x109060612120e06
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd06060201090606
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x906051403020210
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4c5a40
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4c5a6d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c5a90
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c5a1f
jmp 0x4c5a84
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004c59a0
Function at 0x4c5ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5ba6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e69715671547270
mov qword [rsp + 0x31], rdx
movabs rdx, 0x571b5d6f15556d6e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20900030501070d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x207050c02090003
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa0901010e040701
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4c5b40
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4c5b72
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c5b97
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0xf
jb 0x4c5b22
jmp 0x4c5b8b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456420
mov eax, edi
mov ecx, 0xf
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c5ac0

Function at 0x4c6d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6dec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4865d4111f0f6170
mov qword [rsp + 0x33], rdx
movabs rdx, 0xe351741fe44865d4
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc21b891d6174736e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x509080c07120c0b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x308141314120814
mov qword [rsp + 0x23], rdx
movabs rdx, 0x20407070c091113
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4c6d8a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x36]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c6dbc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c6ddf
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x36]
cmp rsi, 0x15
jb 0x4c6d70
jmp 0x4c6dd3
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c6d00
Function at 0x4c70e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c71db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x73d1db6f20a0cd8d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x72b7735ea765ddc6
mov qword [rsp + 0x40], rdx
movabs rdx, 0xbde56375b26f9f90
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6160e0917141013
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x217110805010c06
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1600130e02171108
mov qword [rsp + 0x28], rdx
movabs rdx, 0x11010b050b0b0b02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c7179
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4c71ab
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c71ce
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0x18
jb 0x4c715f
jmp 0x4c71c2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456420
mov eax, edi
mov ecx, 0x18
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004c70e0

Function at 0x4c8680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c877d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x729a01bce61199b5
mov qword [rsp + 0x35], rdx
movabs rdx, 0x18500d729a01bce6
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd09702bd8fffb3d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa120b0c06110303
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc02050511000109
mov qword [rsp + 0x23], rdx
movabs rdx, 0x8020c0205051100
mov qword [rsp + 0x25], rdx
movabs rdx, 0x110f0109110e040d
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4c8720
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c874d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c8770
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4c86ff
jmp 0x4c8764
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004c8680
Function at 0x4cc060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc15d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2ec36b59dc2572e4
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe2202c586ed52ec3
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf19074e2fe70d683
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf02050c07060814
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb0a00120f060505
mov qword [rsp + 0x22], rdx
movabs rdx, 0x110e040c150d0a03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40c06030306110b
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4cc100
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4cc12d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cc150
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4cc0df
jmp 0x4cc144
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456420
mov eax, edi
mov ecx, 0x16
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004cc060

Function at 0x4cd060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd15d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xeebab9aea1b26543
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1a89ea9f6464eeba
mov qword [rsp + 0x40], rdx
movabs rdx, 0x646e4ebea868908d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0407110c031414
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x712000e0702060d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x110c13050b0c0613
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf070a0d13110c05
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4cd100
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4cd12d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cd150
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4cd0df
jmp 0x4cd144
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456420
mov eax, edi
mov ecx, 0x16
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004cd060
Function at 0x4cd420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd506
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x36029174af6d02b2
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1ac72a265754fbe
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0f06010e010008
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1030e0f06010e01
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe0c050c0a080705
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4cd4a0
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4cd4d2
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4cd4f7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0x10
jb 0x4cd482
jmp 0x4cd4eb
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456420
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004cd420

Function at 0x4d0000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0127
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x65adff756fdad173
mov qword [rsp + 0x48], rdx
movabs rdx, 0x53007b86532d9
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7c31611b236cd518
mov qword [rsp + 0x58], rdx
movabs rdx, 0x89ec623b6c691430
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe0c05100f0b1501
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1017001108011710
mov qword [rsp + 0x24], rdx
movabs rdx, 0x106060110170011
mov qword [rsp + 0x28], rdx
movabs rdx, 0x160d0f021102001e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10114190918191f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x15011700131c1110
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d00c9
movzx r9d, byte [rsp + rsi + 0x48]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x48], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x48], dl
add rax, 2
cmp rax, 0x2c
jge 0x4d00f7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x4d011a
movzx r8d, byte [rsp + rdi + 0x48]
sub r8d, edx
cmp rsi, 0x20
jb 0x4d00ac
jmp 0x4d010e
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00456420
mov eax, edi
mov ecx, 0x20
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d0000
Function at 0x4d0a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0b27
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x50423f0716434858
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x5f54642e
movabs rdx, 0x104010500020603
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30a0b0501070104
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4d0ac8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x4d0af7
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4d0b1a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d0aab
jmp 0x4d0b0e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d0a60

Function at 0x4d3a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3b7b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7043654d6d797243
mov qword [rsp + 0x34], rdx
movabs rdx, 0x5d6e69387043654d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6a644f574f527343
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100f0a0712041310
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x130d0d0805061103
mov qword [rsp + 0x22], rdx
movabs rdx, 0x407130d0d080506
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3120b0d0b0b0d0e
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4d3b19
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d3b4b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d3b6e
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xf]
cmp rsi, 0x14
jb 0x4d3aff
jmp 0x4d3b62
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004d3a80
Function at 0x4d4be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4cbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x792a53e451cfbd4b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x41783dcc5a6c61e0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x202060b0d050f00
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10202060b0d05
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0f040605080d0b
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4d4c60
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4d4c8d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d4cb0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4d4c42
jmp 0x4d4ca4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456420
mov eax, edi
mov ecx, 0x10
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004d4be0

Function at 0x4d5960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5a2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x736f1f024d394624
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x48fd28741f65736f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0b020104090c04
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x50d03030005090c
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4d59cf
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x4d59fc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d5a1f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d59b2
jmp 0x4d5a13
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456420
mov eax, edi
mov ecx, 0xe
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d5960
Function at 0x4d7040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7106
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3d7065ce51eb6e69
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xdce4
movabs rdx, 0x700060909
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x8040206
xor eax, eax
jmp 0x4d70a0
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4d70d2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4d70f7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0xa
jb 0x4d7083
jmp 0x4d70eb
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456420
mov eax, edi
mov ecx, 0xa
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d7040

Function at 0x4d9600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d971d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xe25020ae651d6520
mov qword [rsp + 0x43], rdx
movabs rdx, 0x64586572dcec1de2
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x41e0e5ff41645865
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3b0a414d1000a762
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2040202080b02
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x111c0a11160a1718
mov qword [rsp + 0x23], rdx
movabs rdx, 0x181618130712121b
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1a14120e090a0512
mov qword [rsp + 0x33], rdx
movabs rdx, 0x181c17161b170519
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4d96c0
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4d96ed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4d9710
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4d969d
jmp 0x4d9704
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456420
mov eax, edi
mov ecx, 0x1d
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004d9600
Function at 0x4dc260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc346
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc46d6de2e274e647
mov qword [rsp + 0x31], rdx
movabs rdx, 0x576e4c63e1bc66c4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70304010d010904
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd0a070304010d01
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa010a0c0a0b080a
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4dc2e0
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4dc312
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4dc337
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0xf
jb 0x4dc2c2
jmp 0x4dc32b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456420
mov eax, edi
mov ecx, 0xf
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004dc260

Function at 0x4dc720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc81d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x75d6726fe2eddc14
mov qword [rsp + 0x34], rdx
movabs rdx, 0x69d7bfed75d6726f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa3ed946fcd976572
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0911010a040908
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf0207000609130e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40f12030f020700
mov qword [rsp + 0x24], rdx
movabs rdx, 0x403080912110807
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4dc7c0
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4dc7ed
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4dc810
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4dc79f
jmp 0x4dc804
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004dc720