joyce8/EMBER2024-capa huggingface dataset:
Function at 0x488ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488d8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1f3b6e20612073e5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1420fa511f3b6e20
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65b7694ec56544e3
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc02101200071202
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7080c0b0c090f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb090d0d02090006
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x488d2a
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x488d5c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x488d7f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0x14
jb 0x488d10
jmp 0x488d73
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.004454c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004579c0
mov eax, edi
mov ecx, 0x14
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.00488ca0
Function at 0x48bc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48bd46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcd65ced42773c97e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb3c73412cf6f7e30
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe010c09070504
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb03080d000e010c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10f0b0d0d080b0e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x48bce0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x48bd12
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x48bd37
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x10
jb 0x48bcc2
jmp 0x48bd2b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.004454c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004579c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.0048bc60

Function at 0x48d420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48d50c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x726ff6870108ffb6
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe9726ff6870108ff
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe873877dff04f9b0
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0e0004020a030f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb090e10010b0d0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90300080d0c0505
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x48d4aa
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x48d4dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48d4ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 0x11
jb 0x48d490
jmp 0x48d4f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.004454c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004579c0
mov eax, edi
mov ecx, 0x11
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.0048d420
Function at 0x48e040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e14c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb01073a26daaf36e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xcb43f1666ff065bf
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbb23cb43f1666ff0
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf970667020bc65f0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x106021610010f0e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x120a0f111119170d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa160808120a0f11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x411121401171007
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x48e0e8
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x48e11c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x48e13f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0x1a
jb 0x48e0ce
jmp 0x48e133
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.004454c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004579c0
mov eax, edi
mov ecx, 0x1a
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.0048e040

Function at 0x48e5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e68c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x585e0b613a400f70
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf8423c4710585e0b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6465476c614c7334
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb080c0a02010606
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa12070502070703
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc09080f0d120105
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x48e62a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x48e65c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x48e67f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
cmp rsi, 0x15
jb 0x48e610
jmp 0x48e673
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.004454c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004579c0
mov eax, edi
mov ecx, 0x15
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.0048e5a0
Function at 0x4905c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4906dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20686375d74d312e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5eafb6337083e2a
mov qword [rsp + 0x23], rdx
movabs rdx, 0x4e05eafb6337083e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3014c8ea5494fe20
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x16161317030e140a
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa08160f16161317
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1809140317171212
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1508100f010b0d00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1200161708001502
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x490680
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4906ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4906d0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x49065d
jmp 0x4906c4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.004454c0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004579c0
mov eax, edi
mov ecx, 0x19
call fcn.004579c0
nop
nop dword [rax]
call fcn.00455760
jmp fcn.004905c0

Function at 0x4911a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49129b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbcab1ec9abb35937
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x70b1746fb6d8cebc
mov qword [rsp + 0x24], rdx
movabs rdx, 0xafd89e7469d57265
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd000a0500020611
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3020a0416160707
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1403061503020a04
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa04060108040901
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x491239
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x49126b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x49128e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 0x17
jb 0x49121f
jmp 0x491282
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.004454c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004579c0
mov eax, edi
mov ecx, 0x17
call fcn.004579c0
nop
nop dword [rax + rax]
call fcn.00455760
jmp fcn.004911a0
Function at 0x4929c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x492b27
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x2b2b310c3ebc4f50
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x81379494664ee74
mov qword [rsp + 0x23], rdx
movabs rdx, 0x20210b0813794946
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6f6868596c02993a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x43eb655a37640c51
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc3865046611e1b5f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x241411281c110921
mov qword [rsp + 0x46], rdx
movabs rdx, 0x242a0f1e09250b15
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x27242a0f1e0925
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb0e032a02041406
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7030905041e012a
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc071f1323022522
mov qword [rsp + 0x68], rdx
movabs rdx, 0x24151b0323090b10
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1529271318041517
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x492aca
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x3a
jge 0x492af7
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x492b1a
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x2b
jb 0x492aad
jmp 0x492b0e
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2b
call fcn.004454c0
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
call fcn.004579c0
mov eax, edi
mov ecx, 0x2b
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.004929c0

Function at 0x4942c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4943e7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x88781b01206ff374
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd12088781b01206f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6563ffe95ef4dd65
mov qword [rsp + 0x48], rdx
movabs rdx, 0xab6ee574eee13ae9
mov qword [rsp + 0x50], rdx
movabs rdx, 0x656369f06693fa18
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d0d0d0d151a0b09
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x121e1d0d0d0d151a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1c0f051c161d060e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0c0e011415051d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1b19040f04071617
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x494389
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x22
jge 0x4943b7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x22
jae 0x4943da
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x22
jb 0x49436c
jmp 0x4943ce
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.004454c0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.004579c0
mov eax, edi
mov ecx, 0x22
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.004942c0
Function at 0x4945c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4946da
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2b261a17746f2602
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20383d478c452644
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2df02b3120383d47
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3549686361ece3cd
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10001506101b0514
mov qword [rsp + 0x34], rdx
movabs rdx, 0x12080c1510001506
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60a0a091a1b0b04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x114160e040b0513
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0a1007100b110e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x494677
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x24
jge 0x4946a9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4946cd
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0x1c
jb 0x49465d
jmp 0x4946c1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.004454c0
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.004579c0
mov eax, edi
mov ecx, 0x1c
call fcn.004579c0
nop
call fcn.00455760
nop
jmp fcn.004945c0

Function at 0x494d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x494dd2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x316737613d79782f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6cbf0d6601316737
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0b000707020305
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8000b0a0a080a0b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x494d6c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x494d9e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x494dc5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0xd
jb 0x494d52
jmp 0x494db5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.004454c0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.004579c0
mov eax, edi
mov ecx, 0xd
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.00494d00
Function at 0x494f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x494fc6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbb15691061761561
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xe4dcdb11
movabs rdx, 0x10b060a07090b08
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x4090104
xor eax, eax
jmp 0x494f60
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x494f92
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x494fb7
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0xc
jb 0x494f44
jmp 0x494fab
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.004454c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004579c0
mov eax, edi
mov ecx, 0xc
nop
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.00494f00

Function at 0x495140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49520c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1ef069202fcfbef2
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xdd2b
movabs rdx, 0x403000100060601
mov qword [rsp + 0x22], rdx
movabs rdx, 0x709080209020403
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4951a4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4951dc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4951ff
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0xa
jb 0x49518a
jmp 0x4951f3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004454c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004579c0
mov eax, edi
mov ecx, 0xa
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.00495140

Function at 0x495220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4952de
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc6e6c46a6cc2c169
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6cbec1ce
movabs rdx, 0x60701070a020104
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x8070905
xor eax, eax
jmp 0x495281
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4952ae
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4952d1
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x495264
jmp 0x4952c5
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.004454c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004579c0
mov eax, edi
mov ecx, 0xc
call fcn.004579c0
nop
nop
call fcn.00455760
jmp fcn.00495220
Function at 0x495300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4953cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x32ee8265850e65f6
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x8187bd2e
movabs rdx, 0xa030b020a020906
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3000500020a0a03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x495365
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x49539c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4953bf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0xc
jb 0x49534b
jmp 0x4953b3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004454c0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004579c0
mov eax, edi
mov ecx, 0xc
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.00495300

Function at 0x4956a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49575d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x19642eb40d57b66e
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6c
movabs rdx, 0x704030301070201
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x702
xor eax, eax
nop
jmp 0x495700
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x49572d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x495750
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4956e2
jmp 0x495744
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.004454c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004579c0
mov eax, edi
mov ecx, 9
call fcn.004579c0
nop
nop dword [rax]
call fcn.00455760
jmp fcn.004956a0
Function at 0x497e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x497f46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7972ef282a150a52
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb7c624c9e6fe5c0b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10f030b04040409
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30e03040d0d010f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8050103020a0a0c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x497ee0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x497f12
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x497f37
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0x10
jb 0x497ec2
jmp 0x497f2b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.004454c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004579c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.00497e60
Function at 0x498cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498dbd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd7fae40b3c332c3f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x111d66697432650e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e020f2cd82cc061
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x150a060e140f0507
mov qword [rsp + 0x36], rdx
movabs rdx, 0x13160a1403110112
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x40813160a140311
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe02070516000203
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x498d60
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x498d8d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x498db0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x498d3f
jmp 0x498da4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.004454c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004579c0
mov eax, edi
mov ecx, 0x18
call fcn.004579c0
nop
nop dword [rax]
call fcn.00455760
jmp fcn.00498cc0

Function at 0x498de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498eca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e65707b7c727b6f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x749f79536e65707b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0968da3569b9865
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110d0f04100a0012
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10030d01030a110d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe1109001309130e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x498e6d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x498e9a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x498ebd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x498e50
jmp 0x498eb1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.004454c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004579c0
mov eax, edi
mov ecx, 0x14
call fcn.004579c0
nop
call fcn.00455760
jmp fcn.00498de0