joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d8700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d87ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3e6191a765e26926
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5c2d3e6191a765e2
mov qword [rsp + 0x38], rdx
movabs rdx, 0x676e362620e4f174
mov qword [rsp + 0x40], rdx
movabs rdx, 0x907040e0e050902
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x800080209090209
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf000c090b0e0e0b
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4d878d
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jge 0x4d87ba
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d87dd
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x4d8770
jmp 0x4d87d1
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x12
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004d8700

Function at 0x4d8c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8d78
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6e6d26f777465a0
mov qword [rsp + 0x45], rdx
movabs rdx, 0x72c9ac06e6d26f77
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6ee063d064a76e41
mov qword [rsp + 0x50], rdx
movabs rdx, 0x206e0a0674add3f1
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb39b5520b3206edc
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1b180a0513110c1f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x22051f070611050b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x150822051f070611
mov qword [rsp + 0x25], rdx
movabs rdx, 0x90c17071f060f20
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xb201e141f002111
mov qword [rsp + 0x35], rdx
movabs rdx, 0xd1b201e07090022
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x4d8d15
movzx r9d, byte [rsp + rsi + 0x45]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x45], dl
mov byte [rsp + rsi + 0x45], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4d8d48
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4d8d6b
movzx r8d, byte [rsp + rdi + 0x45]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
nop
cmp rsi, 0x23
jb 0x4d8cfb
jmp 0x4d8d5f
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x23
call fcn.00447380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x23
call fcn.0045a8c0
nop
call fcn.004585e0
nop dword [rax]
jmp fcn.004d8c40
Function at 0x4d97a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d98a8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5966cd7562c46f6e
mov qword [rsp + 0x37], rdx
movabs rdx, 0xc46563b470829594
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x61c46563b4708295
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb28d8961fda87a76
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0c18170f131413
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x50917130a081202
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1214050917130a08
mov qword [rsp + 0x27], rdx
movabs rdx, 0x20209070f131616
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4d984b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1a
jge 0x4d9878
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d989b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x4d982e
jmp 0x4d988f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00447380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x19
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004d97a0

Function at 0x4d99e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9aca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf347be61b451a86e
mov qword [rsp + 0x37], rdx
movabs rdx, 0xdff347be61b451a8
mov qword [rsp + 0x38], rdx
movabs rdx, 0xafc66cb0c269f047
mov qword [rsp + 0x40], rdx
movabs rdx, 0x910100806090208
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe02010610030a02
mov qword [rsp + 0x27], rdx
movabs rdx, 0x50f0c010d060607
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4d9a6d
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x4d9a9a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4d9abd
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x4d9a50
jmp 0x4d9ab1
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x11
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004d99e0
Function at 0x4d9ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9bac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20faf2ff0afa6f6e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xfc01697643f120fa
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6040d00030c0400
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x908020c090c050d
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4d9b4f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x4d9b7c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d9b9f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d9b32
jmp 0x4d9b93
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xe
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004d9ae0

Function at 0x4dc6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc78c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x15b902c6699c0301
mov qword [rsp + 0x35], rdx
movabs rdx, 0x84746f15b902c669
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7eb525c37473a961
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc04020605101202
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x12000f0a05111106
mov qword [rsp + 0x25], rdx
movabs rdx, 0x110f040401050207
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4dc72a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x4dc75c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dc77f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
cmp rsi, 0x13
jb 0x4dc710
jmp 0x4dc773
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x13
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004dc6a0
Function at 0x4dcf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd06c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xfc5d0c6365721d64
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x6e3a79fc5d0c6365
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2635346d650a013a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12100506090d0701
mov qword [rsp + 0x19], rdx
movabs rdx, 0x10010d0712100506
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x10120b110c0d0610
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4dd00a
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4dd03c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dd05f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x13
jb 0x4dcff0
jmp 0x4dd053
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x13
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004dcf80

Function at 0x4dd1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd2aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6a4031654161745d
mov qword [rsp + 0x33], rdx
movabs rdx, 0x63406720106a4031
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65695672556b4a6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110e120b06050e03
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x80510030612110e
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa07000f060b0313
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4dd24d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jge 0x4dd27a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4dd29d
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4dd230
jmp 0x4dd291
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x15
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004dd1c0
Function at 0x4de880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de9b8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x1174e9fc756c6176
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x7261eb73801174e9
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe50945056a206567
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1689bfa878910e9e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x7070797412d06091
mov qword [rsp + 0x68], rdx
movabs rdx, 0x10071c07070a1d04
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1f241720081c1516
mov qword [rsp + 0x27], rdx
movabs rdx, 0x160413171f241720
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x140e081e1f181a1b
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1408131112111909
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1f071c1a19101e05
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4de955
movzx r9d, byte [rsp + rsi + 0x4b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rdi + 0x4b], dl
mov byte [rsp + rsi + 0x4b], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4de988
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4de9ab
movzx r8d, byte [rsp + rdi + 0x4b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
nop
cmp rsi, 0x25
jb 0x4de93b
jmp 0x4de99f
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.00447380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x25
call fcn.0045a8c0
nop
call fcn.004585e0
nop dword [rax]
jmp fcn.004de880

Function at 0x4de9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dea9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69cc1dbe65c523c1
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xcce1
movabs rdx, 0x208090001010501
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x5020604
xor eax, eax
jmp 0x4dea40
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x4dea6d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4dea90
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4dea23
jmp 0x4dea84
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xa
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004de9e0
Function at 0x4deac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4deb9d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa8a9b96f849e8c9b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc88aa4876520a8a9
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0a0306060b020d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2070c0a0306060b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd0201050d0b07
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4deb40
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4deb6d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4deb90
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4deb22
jmp 0x4deb84
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xe
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004deac0

Function at 0x4df560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df67d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xd66309cee24e69db
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x74e96d7362e320dd
mov qword [rsp + 0x43], rdx
movabs rdx, 0x2074c9e0f574e96d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65457261f3fae76f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x110b050504021b12
mov qword [rsp + 0x19], rdx
movabs rdx, 0x170b110b05050402
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x180d00080b070b0b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x11120318161a0301
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1707051016040e0a
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4df620
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4df64d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4df670
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4df5fd
jmp 0x4df664
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.00447380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x1d
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004df560
Function at 0x4e0d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0e06
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7897a04ec6c3899d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x96657269d17897a0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20303080405
mov qword [rsp + 0x19], rdx
movabs rdx, 0x308000002030308
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x201060c03080c06
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x4e0da0
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4e0dd2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e0df7
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0xd
jb 0x4e0d82
jmp 0x4e0deb
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xd
nop
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004e0d20

Function at 0x4e20c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e21c8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2016906febd6efe
mov qword [rsp + 0x37], rdx
movabs rdx, 0xb1be06f4f1ff4516
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x76b1be06f4f1ff45
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9f6eb5f040faa2f3
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11150d02000c090b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa0b03130b140f12
mov qword [rsp + 0x23], rdx
movabs rdx, 0x160812040a0b0313
mov qword [rsp + 0x27], rdx
movabs rdx, 0x80a070e060f0a18
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4e216b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1c
jge 0x4e2198
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e21bb
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x4e214e
jmp 0x4e21af
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00447380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x19
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004e20c0
Function at 0x4e4f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4ffd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7a7b62c2906e6fe4
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xfa8e5e8fed747a7b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x96d5699bf45477eb
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa151414070b1506
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4150e0f07050d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x706030909120d0c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0909070509110d
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4e4fa0
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4e4fcd
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e4ff0
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4e4f7f
jmp 0x4e4fe4
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00447380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x16
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004e4f00

Function at 0x4e5020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e510a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9f09418d70eef543
mov qword [rsp + 0x34], rdx
movabs rdx, 0x9a9466fc9f09418d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x573bbaf41c9d6f08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90109040b021012
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40c08070a08110f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x806080e020f1006
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4e50ad
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x18
jge 0x4e50da
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e50fd
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4e5090
jmp 0x4e50f1
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x14
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004e5020
Function at 0x4e5c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5d5b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x636132520d6f3c4c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x293f636132520d6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8a46ee0319035715
mov qword [rsp + 0x40], rdx
movabs rdx, 0x61104060f040f11
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x60b090001100c0b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30e060b09000110
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30e0508110d0a06
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4e5cf9
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4e5d2b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e5d4e
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 0x12
jb 0x4e5cdf
jmp 0x4e5d42
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x12
call fcn.0045a8c0
nop
nop dword [rax + rax]
call fcn.004585e0
jmp fcn.004e5c60

Function at 0x4e74a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7586
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5d4e6c435c2e6543
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4c3944445c655d4e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6060d0c0c06020c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90206060d0c0c06
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7030c06030a0b09
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4e7520
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4e7552
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4e7577
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0xe
jb 0x4e7502
jmp 0x4e756b
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xe
nop
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004e74a0
Function at 0x4e87c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e88bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3111a8d3bb72ac3d
mov qword [rsp + 0x39], rdx
movabs rdx, 0x47692f390c722831
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6ef4610b4a65d5ad
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50f071013070501
mov qword [rsp + 0x19], rdx
movabs rdx, 0x50c0a00030b0104
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe0f04010b0f0e15
mov qword [rsp + 0x29], rdx
movabs rdx, 0xc000f0607060812
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4e8860
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4e888d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e88b0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e883f
jmp 0x4e88a4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00447380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x17
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004e87c0

Function at 0x4e88e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e89b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x80657093747d7243
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xd67b6fb4a7806570
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70204090c020108
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x204070907040b01
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e894c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e897e
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e89a5
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 0xd
jb 0x4e8932
jmp 0x4e8995
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xd
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004e88e0