joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bc7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc87d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74079869f1daf9b2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xabaebe63af72b60b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3030509010e0f0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30203030509010e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0d060806080003
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bc820
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4bc84d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bc870
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4bc802
jmp 0x4bc864
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004bc7a0

Function at 0x4be120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be206
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x75a969ba73d1655d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb94f648972ae8b66
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4020c0f040a0604
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6060404020c0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x900030e0d090d0c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4be1a0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4be1d2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4be1f7
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0x10
jb 0x4be182
jmp 0x4be1eb
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004be120
Function at 0x4bf1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf278
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x190a346f49053148
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x600070002070505
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 1
xor eax, eax
jmp 0x4bf218
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4bf248
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bf26b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4bf1fb
jmp 0x4bf25f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004bf1c0

Function at 0x4bfe60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bff27
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f6b636f05595dca
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x106a
movabs rdx, 0x800010309090102
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3020802000800
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4bfec7
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4bfef7
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4bff1a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4bfeaa
jmp 0x4bff0e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bfe60

Function at 0x4c18c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c19a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6583855e5daa69a4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa59dce6f995c6583
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd08000902040d0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0206030d080009
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40809020b050d06
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c1940
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4c1972
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c1997
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0xe
jb 0x4c1922
jmp 0x4c198b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004c18c0
Function at 0x4cd2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd3c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1af5c1330cfa0743
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5736756c1d4e651a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x209030602070905
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a060007010209
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd010700020d040a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cd360
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4cd392
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cd3b7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0xf
jb 0x4cd342
jmp 0x4cd3ab
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004cd2e0

Function at 0x4cd4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd5cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4d38c2c94caeb1d7
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4a4d38c2c94caeb1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x574be22b7274d0d0
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0f0a0504080f09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20d06090e0f0a05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1090200040e0d04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4cd56a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x4cd59c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4cd5bf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x11
jb 0x4cd550
jmp 0x4cd5b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004cd4e0
Function at 0x4cec20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cecd2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x7961a87228740128
mov qword [rsp + 0x20], rdx
movabs rdx, 0x105030105
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4cec6e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4ceca2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4cecc5
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 8
jb 0x4cec54
nop
jmp 0x4cecb9
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004cec20

Function at 0x4d2740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d283d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20cfacdff806fe4d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9e989c979a20cfac
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3a04690220649c61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x14050c0609010804
mov qword [rsp + 0x32], rdx
movabs rdx, 0x30a010e1304140b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x202030c0c0c030a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x603050114110505
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d27e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4d280d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d2830
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4d27bf
jmp 0x4d2824
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d2740
Function at 0x4d2860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2968
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x66412045d4606fa4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe3aefab5a2a0692a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa339e3aefab5a2a0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656dbb54ac64f561
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x170e081708080010
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd11020c15040f03
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf0011130d11020c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11040b0a0f030415
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d290b
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x4d2938
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4d295b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4d28ee
jmp 0x4d294f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d2860

Function at 0x4d2ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2dcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x64092076627a7953
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x64d9616409207662
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf46dde542063e095
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd10020406010b02
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1203100c12070d10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3060b0203030912
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d2d6a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d2d9c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d2dbf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x13
jb 0x4d2d50
jmp 0x4d2db3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d2ce0
Function at 0x4d3440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d353b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf20e83fe71bec22
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9e6eb41f378b0f20
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6528d154203fe621
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5080f0b0a041010
mov qword [rsp + 0x34], rdx
movabs rdx, 0x514010e140f0902
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x30d000514010e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3130700140b0e06
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d34d9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4d350b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d352e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0x16
jb 0x4d34bf
jmp 0x4d3522
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004d3440

Function at 0x4d3b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3c4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd02661a873d0e041
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd79bbf7c23d02661
mov qword [rsp + 0x20], rdx
movabs rdx, 0xca7eb7542064dfb6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8130b0e010c0401
mov qword [rsp + 0x30], rdx
movabs rdx, 0x14130a1208060e14
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0c0602080d0907
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d3bea
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d3c1c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d3c3f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0x15
jb 0x4d3bd0
jmp 0x4d3c33
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d3b60
Function at 0x4d4000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d40ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74d4e96169a4a1d6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x64da6674d4e96169
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65b0b2ecd5ffe661
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50109050c080800
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0f001100000001
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10060e060e020d06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d408a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d40bc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d40df
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x13
jb 0x4d4070
jmp 0x4d40d3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d4000

Function at 0x4d4420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d452c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa1a4848a79679341
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65166192782051a1
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65b06a547483ac85
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x100811070b071115
mov qword [rsp + 0x36], rdx
movabs rdx, 0x308100811070b07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30b01040f070506
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150e0d1212050405
mov qword [rsp + 0x48], rdx
movabs rdx, 0x100a060314060d0a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d44c8
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4d44fc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x4d451f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0x17
jb 0x4d44ae
jmp 0x4d4513
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d4420
Function at 0x4d5140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d525a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x176cfe72749d3093
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x610a08b95461ef0b
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb0b26d928620d061
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb892ddfa1e119a00
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb01051207160214
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x101a081e02190b01
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130d010e1c001915
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d0709170d190818
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe1c070c0508141b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4d51f7
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x26
jge 0x4d5229
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4d524d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
cmp rsi, 0x1f
jb 0x4d51dd
jmp 0x4d5241
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.00441380
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00451880
mov eax, edi
mov ecx, 0x1f
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004d5140
Function at 0x4d7260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7368
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xfd272074034c6116
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x16212020457272cb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x236e162120204572
mov qword [rsp + 0x24], rdx
movabs rdx, 0x42522341203c11f1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x140817001307160e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1303130d12140f06
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x110b14121303130d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x18021707190b1302
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d730b
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x4d7338
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4d735b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4d72ee
jmp 0x4d734f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d7260

Function at 0x4d7660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7768
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x744c424732f5535d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2731455b5b484461
mov qword [rsp + 0x23], rdx
movabs rdx, 0x4a2731455b5b4844
mov qword [rsp + 0x24], rdx
movabs rdx, 0x516dec5420497261
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30e0f1316060a18
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd02040b100c0313
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x50d0b0d02040b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe000f0909090206
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d770b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4d7738
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d775b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4d76ee
jmp 0x4d774f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d7660
Function at 0x4d8d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8e6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7c16e61ff72f54a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64be3e7407c16e61
mov qword [rsp + 0x20], rdx
movabs rdx, 0x656d2abdacc41261
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60710011111030a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0d0a110d0d0909
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70f060e0f090a10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d8e0a
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d8e3c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d8e5f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x14
jb 0x4d8df0
jmp 0x4d8e53
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d8d80

Function at 0x4d8e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8f6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe4524b2b9a4d72e4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc798e774e4524b2b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656dcdd9dcde7261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50b0b0402100b02
mov qword [rsp + 0x32], rdx
movabs rdx, 0x50e0f030a06050b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10110a090b07000e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d8f0d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4d8f3a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d8f5d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d8ef0
jmp 0x4d8f51
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d8e80