joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b7040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x60]
cmp r12, qword [r14 + 0x10]
jbe 0x4b7286
push rbp
mov rbp, rsp
sub rsp, 0xd8
movups xmmword [rsp + 0xe8], xmm15
movups xmmword [rsp + 0xf8], xmm15
movups xmmword [rsp + 0x108], xmm15
movups xmmword [rsp + 0x118], xmm15
movabs rdx, 0x5c9027df027e01b6
mov qword [rsp + 0x52], rdx
movabs rdx, 0x4d315b8322a3a3d
mov qword [rsp + 0x5a], rdx
movabs rdx, 0xc5332784683bce6b
mov qword [rsp + 0x62], rdx
movabs rdx, 0xa25a219f1e1584ff
mov qword [rsp + 0x6a], rdx
movabs rdx, 0x8e25994ec6faa9ca
mov qword [rsp + 0x72], rdx
movabs rdx, 0xb178fb4152ce66c
mov qword [rsp + 0x7a], rdx
movabs rdx, 0x55aea3d80f2ab10d
mov qword [rsp + 0x82], rdx
movabs rdx, 0xf007a60d09137c59
mov qword [rsp + 0x8a], rdx
movabs rdx, 0x3d1d1e2d171c0635
mov qword [rsp + 0x92], rdx
movabs rdx, 0x2c0c202915213d1d
mov qword [rsp + 0x98], rdx
movabs rdx, 0xd00350d36022434
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x221723141811053f
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x3f30192d2c311021
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x133f34323604171f
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x312134253d113522
mov qword [rsp + 0xc0], rdx
movabs rdx, 0x380e36270737051a
mov qword [rsp + 0xc8], rdx
movabs rdx, 0x1928050438311439
mov qword [rsp + 0xd0], rdx
xor eax, eax
jmp 0x4b71c0
movzx r8d, byte [rsp + rbx + 0x52]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rsi + 0x52], dl
mov byte [rsp + rbx + 0x52], dil
add rax, 2
nop dword [rax]
cmp rax, 0x46
jge 0x4b71fd
movzx edx, byte [rsp + rax + 0x92]
movzx ebx, byte [rsp + rax + 0x93]
mov esi, edx
xor edx, ebx
add edx, eax
nop dword [rax]
cmp rsi, 0x40
jae 0x4b7274
movzx edi, byte [rsp + rsi + 0x52]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x46]
cmp rbx, 0x40
jb 0x4b71a2
jmp 0x4b7268
movups xmmword [rsp + 0x12], xmm15
movups xmmword [rsp + 0x22], xmm15
movups xmmword [rsp + 0x32], xmm15
movups xmmword [rsp + 0x42], xmm15
xor eax, eax
jmp 0x4b7225
movzx ecx, byte [rsp + rax + 0x52]
mov byte [rsp + rax + 0x12], cl
inc rax
cmp rax, 0x40
jl 0x4b7219
movups xmm0, xmmword [rsp + 0x12]
movups xmmword [rsp + 0xe8], xmm0
movups xmm0, xmmword [rsp + 0x22]
movups xmmword [rsp + 0xf8], xmm0
movups xmm0, xmmword [rsp + 0x32]
movups xmmword [rsp + 0x108], xmm0
movups xmm0, xmmword [rsp + 0x42]
movups xmmword [rsp + 0x118], xmm0
add rsp, 0xd8
pop rbp
ret
mov eax, ebx
mov ecx, 0x40
call fcn.00460ec0
mov eax, esi
mov ecx, 0x40
nop dword [rax + rax]
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004b7040
Function at 0x4bccc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcdbb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x487667615a324047
mov qword [rsp + 0x19], rdx
movabs rdx, 0x42363866613f7648
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2f5236293a386c64
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0306030e150a05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11012050f04080a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70e0f0a03040107
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90f130816010000
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bcd59
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x4bcd8b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4bcdae
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0x17
jb 0x4bcd3f
jmp 0x4bcda2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460ec0
mov eax, edi
mov ecx, 0x17
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.004bccc0

Function at 0x4bcf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcffd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x43764d4a59636b7c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x59345b3694566839
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3590983553677c37
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x130403040b0102
mov qword [rsp + 0x32], rdx
movabs rdx, 0x130604020307150d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x111161304051306
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0a130d01070912
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bcfa0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4bcfcd
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4bcff0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x4bcf7f
jmp 0x4bcfe4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460ec0
mov eax, edi
mov ecx, 0x18
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004bcf00
Function at 0x4bf500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf647
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x36e031c5a4dbea33
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x386336e031c5a4db
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd739bc5d6c7ac56c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x33c459dd0ff833e6
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4273bb3b39df55cb
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc15150204150b14
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x3200c1515020415
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f1b0e181e1b0f02
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1814080c0a0b1521
mov qword [rsp + 0x50], rdx
movabs rdx, 0x41c17170d1e110c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a180a1c150b171e
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb0312011a200616
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4bf5e7
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x32
jge 0x4bf617
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x4bf63a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x22
jb 0x4bf5ca
jmp 0x4bf62e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x22
call fcn.0044b900
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00460ec0
mov eax, edi
mov ecx, 0x22
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004bf500

Function at 0x4c03c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c04f8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x57132d311d222107
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x174a443454415713
mov qword [rsp + 0x20], rdx
movabs rdx, 0x513e355b462f197e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x305a2b2733263131
mov qword [rsp + 0x30], rdx
movabs rdx, 0x355f5935315d2c34
mov qword [rsp + 0x38], rdx
movabs rdx, 0x13010c1500070d03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f1018080f062312
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5090702060f1d0a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a1b0f1c23001520
mov qword [rsp + 0x58], rdx
movabs rdx, 0x523230e0b11171f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1714180f240c0112
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4c0498
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x30
jge 0x4c04c8
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x4c04eb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x26
jb 0x4c047b
jmp 0x4c04df
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.0044b900
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00460ec0
mov eax, edi
mov ecx, 0x26
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.004c03c0
Function at 0x4c9de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9ec6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb1f974edf2fdfe30
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xee6564b42d61de7b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10508020b0c0409
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf02010f01050802
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30607060b04090f
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c9e60
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4c9e92
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c9eb7
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0x10
jb 0x4c9e42
jmp 0x4c9eab
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004c9de0

Function at 0x4cd320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd3f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa6925fa8ba5dcf44
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x75979ba6925fa8ba
mov qword [rsp + 0x20], rdx
movabs rdx, 0x107030104010301
mov qword [rsp + 0x28], rdx
movabs rdx, 0x101010901080206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cd38c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4cd3be
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cd3e5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 0xb
jb 0x4cd372
jmp 0x4cd3d5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004cd320
Function at 0x4ce940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cea3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x363269722c465063
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x176c3d6eef693632
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2b4a154074236141
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20e080115131300
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1003061303030d12
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1403000700140914
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71008020b121306
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ce9d9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4cea0b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cea2e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0x16
jb 0x4ce9bf
jmp 0x4cea22
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460ec0
mov eax, edi
mov ecx, 0x16
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.004ce940

Function at 0x4cef60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf01d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x10292bee3a6122fd
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x168
movabs rdx, 0x700060901010406
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3070605
xor eax, eax
jmp 0x4cefc0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4cefed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4cf010
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4cefa3
jmp 0x4cf004
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460ec0
mov eax, edi
mov ecx, 0xa
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004cef60

Function at 0x4cf4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf572
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x695f677274654250
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10703050402
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4cf50e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4cf542
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4cf565
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 8
jb 0x4cf4f4
nop
jmp 0x4cf559
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044b900
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00460ec0
mov eax, edi
mov ecx, 8
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004cf4c0
Function at 0x4d1580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d167d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb529ff0f787d690a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x68986175505fb529
mov qword [rsp + 0x22], rdx
movabs rdx, 0x676e9fa294f66e29
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10205010f0e0c10
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf11030506110e02
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1200130410070f11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11050f0006040110
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d1620
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4d164d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d1670
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d15ff
jmp 0x4d1664
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460ec0
mov eax, edi
mov ecx, 0x16
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004d1580

Function at 0x4d2480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2552
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1c3c2f27fe64306f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2761981c3c2f27fe
mov qword [rsp + 0x20], rdx
movabs rdx, 0x107070003050308
mov qword [rsp + 0x28], rdx
movabs rdx, 0x804060a01080506
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d24ec
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d251e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d2545
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0xb
jb 0x4d24d2
jmp 0x4d2535
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004d2480
Function at 0x4d2800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d28bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x98be8e555f8db2c5
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xcd75
movabs rdx, 0x200070205010906
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060209
xor eax, eax
jmp 0x4d2860
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4d288d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4d28b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4d2843
jmp 0x4d28a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460ec0
mov eax, edi
mov ecx, 0xa
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004d2800

Function at 0x4d2ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2d98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x61506c917c706975
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3040304030102
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x505
xor eax, eax
jmp 0x4d2d38
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4d2d68
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d2d8b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4d2d1b
jmp 0x4d2d7f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00460ec0
mov eax, edi
mov ecx, 8
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.004d2ce0

Function at 0x4d2dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2e7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69631e6e29223039
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xb261
movabs rdx, 0x503000902010502
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050902
xor eax, eax
jmp 0x4d2e20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4d2e4d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4d2e70
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4d2e03
jmp 0x4d2e64
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460ec0
mov eax, edi
mov ecx, 0xa
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004d2dc0
Function at 0x4d5540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d560c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x70c37267b70fb8a8
mov qword [rsp + 0x19], rdx
movabs rdx, 0x13086870c37267b7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30602030a030000
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1010109
xor eax, eax
jmp 0x4d55a5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4d55dc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4d55ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 0xb
jb 0x4d558b
jmp 0x4d55f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004d5540

Function at 0x4d5c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5d3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c08a97281687417
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x799274836285cd70
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf050c0a030905
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf090506000f050c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe050c0c090e0905
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d5ce0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4d5d0d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d5d30
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4d5cc2
jmp 0x4d5d24
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460ec0
mov eax, edi
mov ecx, 0x10
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004d5c60
Function at 0x4d6120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6206
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdae00788edd174cf
mov qword [rsp + 0x18], rdx
movabs rdx, 0x747217f4075fdae0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x405060b050b0906
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5030405060b050b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6020b0b0a040700
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4d61a0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4d61d2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d61f7
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0xe
jb 0x4d6182
jmp 0x4d61eb
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004d6120

Function at 0x4d6d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6e2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2d69743e41150133
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2d24f0133d472d69
mov qword [rsp + 0x20], rdx
movabs rdx, 0x200010907070b0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0908030a0a0c04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d6dcf
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4d6dfc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d6e1f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d6db2
jmp 0x4d6e13
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004d6d60