joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4cc0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc1c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x43e1b9c5a55e6e18
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb72f65729070f5a8
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb00040509020002
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe060b0004050902
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20b0f080806030e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cc160
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4cc192
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4cc1b7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0x10
jb 0x4cc142
jmp 0x4cc1ab
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004617c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004cc0e0

Function at 0x4ccd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ccdd8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x18496ccecda7d514
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100070401020103
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
jmp 0x4ccd78
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4ccda8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ccdcb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4ccd5b
jmp 0x4ccdbf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004617c0
mov eax, edi
mov ecx, 8
call fcn.004617c0
nop
call fcn.0045f540
nop dword [rax]
jmp fcn.004ccd20
Function at 0x4cd140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd21d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x60125e61093e7243
mov qword [rsp + 0x18], rdx
movabs rdx, 0x252a525461635f59
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb040302060f020e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50c0d070f060202
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe09080308020907
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cd1c0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4cd1ed
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4cd210
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4cd1a2
jmp 0x4cd204
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004617c0
mov eax, edi
mov ecx, 0x10
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004cd140

Function at 0x4ce280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce39d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x71dbe74086c656e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1261ce7d0eae9fd7
mov qword [rsp + 0x23], rdx
movabs rdx, 0x94720c2cc61261ce
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0736912650ce039
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1214081912050a00
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa151014000c0709
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12000d1c000a0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x141c07060a150b0f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1003191716111610
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ce340
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4ce36d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ce390
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4ce31d
jmp 0x4ce384
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044c4e0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004617c0
mov eax, edi
mov ecx, 0x1d
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004ce280
Function at 0x4cf080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf166
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc8d8892b1a8e1c0e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x191fcdee66f74265
mov qword [rsp + 0x24], rdx
movabs rdx, 0x106020402060a05
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0f0d0a01060204
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0e03010307000c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cf100
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4cf132
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4cf157
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0x10
jb 0x4cf0e2
jmp 0x4cf14b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004617c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004cf080

Function at 0x4cf180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf266
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x92867c825d629046
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c797c6c6f4f5e92
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1050a0408040507
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6050c0d01050a04
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0a020e060e0503
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cf200
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4cf232
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cf257
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0xf
jb 0x4cf1e2
jmp 0x4cf24b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004617c0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004cf180
Function at 0x4cf740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf812
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x72942516710e7246
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1c06177294251671
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80208050a050803
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x904060902050802
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cf7ac
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4cf7de
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cf805
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0xb
jb 0x4cf792
jmp 0x4cf7f5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.004617c0
mov eax, edi
mov ecx, 0xb
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004cf740

Function at 0x4cfb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cfbcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x687a6e7043726a47
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6549717e656c687a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x607070606010a0c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10b020c04070607
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4cfb6f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4cfb9c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cfbbf
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4cfb52
jmp 0x4cfbb3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004617c0
mov eax, edi
mov ecx, 0xe
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004cfb00
Function at 0x4d13c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d14a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x50306cd3464ce347
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x59c8dcd44e47ea59
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0a0f080e0f0902
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6090d0a0f080e0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0e04010f09080c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d1440
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4d1472
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d1497
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0x10
jb 0x4d1422
jmp 0x4d148b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004617c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004d13c0

Function at 0x4d14c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d158c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x871b73acb0748224
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb3c57272
movabs rdx, 0xa0b0007060a0404
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10b030601070a0b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d1525
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d155c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4d157f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 0xc
jb 0x4d150b
jmp 0x4d1573
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004617c0
mov eax, edi
mov ecx, 0xc
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004d14c0
Function at 0x4d2b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2c4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5f67504c5f6e2f40
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6551695e475f6750
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50901050708070b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x602000904030509
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d2bef
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4d2c1c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d2c3f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x4d2bd2
jmp 0x4d2c33
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.004617c0
mov eax, edi
mov ecx, 0xd
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004d2b80

Function at 0x4d36e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3792
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x656c396053613959
mov qword [rsp + 0x20], rdx
movabs rdx, 0x401050103000301
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4d3731
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4d375e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d3785
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4d3714
jmp 0x4d3775
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044c4e0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.004617c0
mov eax, edi
mov ecx, 8
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004d36e0

Function at 0x4d3e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3f26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8a8172698474aebe
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x724db46e69758a81
mov qword [rsp + 0x24], rdx
movabs rdx, 0x50307010b070500
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x603040705030701
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60606010c030804
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d3ec0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4d3ef2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d3f17
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0xe
jb 0x4d3ea2
jmp 0x4d3f0b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004617c0
mov eax, edi
mov ecx, 0xe
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004d3e40
Function at 0x4d3f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4007
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3940213746450e53
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf37413940213746
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x202090a01040507
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6040809
xor eax, eax
jmp 0x4d3fa8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x35]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x35]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4d3fd7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4d3ffa
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4d3f8b
jmp 0x4d3fee
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004617c0
mov eax, edi
mov ecx, 0xb
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004d3f40

Function at 0x4d5a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5ae6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x47ace7081daae123
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x21d0df1ba91647ac
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0d0c0a0b0b0100
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0609020b0d0c0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa05040800020309
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d5a80
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4d5ab2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d5ad7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0xe
jb 0x4d5a62
jmp 0x4d5acb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004617c0
mov eax, edi
mov ecx, 0xe
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004d5a00
Function at 0x4d5ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5f7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x643ddc4ed8e5e454
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57cde465d2fb643d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90a0a06050b0405
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7090109090a0a06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90c080703020601
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d5f20
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4d5f4d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d5f70
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d5f02
jmp 0x4d5f64
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004617c0
mov eax, edi
mov ecx, 0xe
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004d5ea0

Function at 0x4d6ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6da6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x50df6ee0ca41cacc
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x3b
movabs rdx, 0x301060604080007
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 4
xor eax, eax
nop
jmp 0x4d6d40
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4d6d72
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d6d97
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 9
jb 0x4d6d22
jmp 0x4d6d8b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004617c0
mov eax, edi
mov ecx, 9
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004d6ce0
Function at 0x4d7460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d753d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f54202c70742b2a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x375d614779366f54
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40508000a0a0105
mov qword [rsp + 0x26], rdx
movabs rdx, 0x508040508000a0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60c050001000d
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4d74e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4d750d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d7530
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d74c2
jmp 0x4d7524
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004617c0
mov eax, edi
mov ecx, 0xe
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004d7460

Function at 0x4d7be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7cac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xcc01a211d2d1573
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xb9c1
movabs rdx, 0x909030408050202
mov qword [rsp + 0x22], rdx
movabs rdx, 0x107050901060909
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4d7c44
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d7c7c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4d7c9f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0xa
jb 0x4d7c2a
jmp 0x4d7c93
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004617c0
mov eax, edi
mov ecx, 0xa
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004d7be0

Function at 0x4d7cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7d78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd0256f9974e1dccc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x407070001020401
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6020001
xor eax, eax
jmp 0x4d7d16
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4d7d48
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d7d6b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 8
jb 0x4d7cfc
jmp 0x4d7d5f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004617c0
mov eax, edi
mov ecx, 8
call fcn.004617c0
nop
call fcn.0045f540
nop dword [rax]
jmp fcn.004d7cc0