joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4cb7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb86c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x690a3c0db538180d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x57bea8690a3c0db5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x401000509040800
mov qword [rsp + 0x28], rdx
movabs rdx, 0x603030006030206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cb80f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4cb83c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cb85f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4cb7f2
jmp 0x4cb853
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004610a0
mov eax, edi
mov ecx, 0xb
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004cb7a0

Function at 0x4cbb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cbc5d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f4944da15657221
mov qword [rsp + 0x18], rdx
movabs rdx, 0x656c50374c3d6f49
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x29723a50510d692c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa03090405130403
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1508101515000a0a
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0e150810151500
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa13050b0f101115
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cbc00
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4cbc2d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cbc50
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4cbbdf
jmp 0x4cbc44
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004610a0
mov eax, edi
mov ecx, 0x16
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004cbb60
Function at 0x4cdb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdc66
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x591e746166131a10
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4b65355b5a36591e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0a080703010701
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0a09020b0a0807
mov qword [rsp + 0x30], rdx
movabs rdx, 0x907080009060008
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cdc00
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 5]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4cdc32
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cdc57
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 5]
cmp rsi, 0xe
jb 0x4cdbe2
jmp 0x4cdc4b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004610a0
mov eax, edi
mov ecx, 0xe
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004cdb80

Function at 0x4cdf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce04c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xbff4694ccaf0e946
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xdb62c8bff4694cca
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa03090707030808
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6090701020a0a03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cdfef
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4ce01c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ce03f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4cdfd2
jmp 0x4ce033
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004610a0
mov eax, edi
mov ecx, 0xb
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004cdf80
Function at 0x4ce5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce68c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f736b5043656543
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4941593265636f73
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80b0804030a0d0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x502000c0a00080b
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4ce62f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4ce65c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ce67f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ce612
jmp 0x4ce673
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004610a0
mov eax, edi
mov ecx, 0xe
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004ce5c0

Function at 0x4ce6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce78c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc852ec75dcdee147
mov qword [rsp + 0x19], rdx
movabs rdx, 0x68c852ec75dcdee1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbfe7f0635672325a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70a090505010508
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50f05100e09070a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20f060203070c02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ce72a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ce75c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ce77f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x11
jb 0x4ce710
jmp 0x4ce773
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004610a0
mov eax, edi
mov ecx, 0x11
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004ce6a0
Function at 0x4cea00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ceafd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7217c46eaf330147
mov qword [rsp + 0x18], rdx
movabs rdx, 0xba6e8fcd52227217
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57d967ab05724004
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0301110f0e0111
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd120a050d08020f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x140d0d120a050d08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140f0914060e060e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ceaa0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4ceacd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ceaf0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4cea7f
jmp 0x4ceae4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004610a0
mov eax, edi
mov ecx, 0x16
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004cea00

Function at 0x4cf120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf21b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc19a50479b96527
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x74f90c19a50479b9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc27380ea89621c72
mov qword [rsp + 0x26], rdx
movabs rdx, 0x110d0e0b0202000e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x305110e050f0602
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70d0305110e050f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5040f0805070b11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cf1b9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4cf1eb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4cf20e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0x12
jb 0x4cf19f
jmp 0x4cf202
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004610a0
mov eax, edi
mov ecx, 0x12
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.004cf120
Function at 0x4cfc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cfcde
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x453173d64c67d83b
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xcb6fd9d2
movabs rdx, 0x4080409060802
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x9040b01
xor eax, eax
jmp 0x4cfc81
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4cfcae
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4cfcd1
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4cfc64
jmp 0x4cfcc5
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
nop
call fcn.0045ee20
jmp fcn.004cfc20

Function at 0x4d0680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d076c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x174c3dfc31254210
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x36174c3dfc312542
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5721511d4e687445
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2000d040e010e07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30d02000d040e01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x504080f06060902
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d070a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4d073c
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4d075f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x11
jb 0x4d06f0
jmp 0x4d0753
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004610a0
mov eax, edi
mov ecx, 0x11
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d0680
Function at 0x4d0780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0866
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5d3e174d9847747
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x57ec66fe49606205
mov qword [rsp + 0x22], rdx
movabs rdx, 0x709070d0b08020b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x908090d09010709
mov qword [rsp + 0x30], rdx
movabs rdx, 0x907050b06090603
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d0800
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4d0832
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d0857
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
cmp rsi, 0xf
jb 0x4d07e2
jmp 0x4d084b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004610a0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d0780

Function at 0x4d1520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d15dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc472a4e46136b34c
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x707050407040205
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x104
xor eax, eax
nop
jmp 0x4d1580
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4d15ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d15d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4d1562
jmp 0x4d15c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004610a0
mov eax, edi
mov ecx, 9
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004d1520

Function at 0x4d18e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d199d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x706c52797076985c
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x7d
movabs rdx, 0x504080407030108
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x808
xor eax, eax
nop
jmp 0x4d1940
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4d196d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d1990
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4d1922
jmp 0x4d1984
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004610a0
mov eax, edi
mov ecx, 9
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004d18e0
Function at 0x4d1e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1eec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x33f513656357f150
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1116240cc11c33f5
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0a0c0b020a060d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1080a05010c0901
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d1e8f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4d1ebc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d1edf
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d1e72
jmp 0x4d1ed3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004610a0
mov eax, edi
mov ecx, 0xe
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d1e20

Function at 0x4d2d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2e87
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x1ae40c2222080f24
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf6f1ae40c222208
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xaa81a6928bb6c03
mov qword [rsp + 0x24], rdx
movabs rdx, 0x74d53569667e7429
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8833fe6fe16e0884
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1f181a1412200902
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b000c0a1f181a14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1d06041021111114
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11050a171d011a0a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f0d050304070f06
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4d2e29
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x24
jge 0x4d2e57
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x22
jae 0x4d2e7a
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x22
jb 0x4d2e0c
jmp 0x4d2e6e
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
call fcn.0044bb80
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.004610a0
mov eax, edi
mov ecx, 0x22
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d2d60
Function at 0x4d41a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4267
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5696d9bd1c77229
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xdfc46933
movabs rdx, 0x70802030a040b04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3020b0204000708
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d4208
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4d4237
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4d425a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d41eb
jmp 0x4d424e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d41a0

Function at 0x4d4ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4dac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8a8e90fe9396c747
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x97a1886e
movabs rdx, 0xa0a090b020a0402
mov qword [rsp + 0x28], rdx
movabs rdx, 0x704040306050105
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d4d45
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d4d7c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4d4d9f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0xc
jb 0x4d4d2b
jmp 0x4d4d93
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d4ce0
Function at 0x4d4ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4f8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1f42754e41410945
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4f1f42754e414109
mov qword [rsp + 0x20], rdx
movabs rdx, 0x35281b6f665d746f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x710040b00080e0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0e0106080c0108
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100e030c0b0f030f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d4f2a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d4f5c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4d4f7f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0x11
jb 0x4d4f10
jmp 0x4d4f73
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004610a0
mov eax, edi
mov ecx, 0x11
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d4ea0

Function at 0x4d4fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5052
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x2fd63b1f494153d2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x600040605000007
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4d4fee
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4d5022
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d5045
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 8
jb 0x4d4fd4
nop
jmp 0x4d5039
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044bb80
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004610a0
mov eax, edi
mov ecx, 8
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d4fa0

Function at 0x4d52c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5386
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xde516ebc53e053e4
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xb6
movabs rdx, 0x800020804020606
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x607
xor eax, eax
nop
jmp 0x4d5320
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4d5352
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d5377
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7d]
cmp rsi, 9
jb 0x4d5302
jmp 0x4d536b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004610a0
mov eax, edi
mov ecx, 9
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d52c0