joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49d660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d798
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xe5744c5dc36bf7f7
mov qword [rsp + 0x46], rdx
movabs rdx, 0xcbdde5744c5dc36b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20f36fd9b9eade7d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x75d1aad147d86f28
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20ab70c0d2c62b63
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc0d0d071e10071b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1715020b05040118
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1e1715020b0504
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe000b05171808
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1d1410120b201c0a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x30412161e09100c
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x49d735
movzx r9d, byte [rsp + rsi + 0x46]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rdi + 0x46], dl
mov byte [rsp + rsi + 0x46], r8b
add rax, 2
cmp rax, 0x2a
jge 0x49d768
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x49d78b
movzx r8d, byte [rsp + rdi + 0x46]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
nop
cmp rsi, 0x22
jb 0x49d71b
jmp 0x49d77f
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00456420
mov eax, edi
mov ecx, 0x22
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.0049d660
Function at 0x4a15e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4a174c
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x7463656c661f72
mov qword [rsp + 0x53], rdx
movabs rdx, 0xb3b3d165ec6e2e3d
mov qword [rsp + 0x5b], rdx
movabs rdx, 0x9e72cc0772b3b3d1
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe8c4170ce0bea820
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe192f16d208bc1c5
mov qword [rsp + 0x70], rdx
movabs rdx, 0xb46564a5751d649e
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2c11171917091923
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1022191d11251f22
mov qword [rsp + 0x21], rdx
movabs rdx, 0x12151022191d1125
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1010e27160f291d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1a1d140d080d1c24
mov qword [rsp + 0x33], rdx
movabs rdx, 0xb280f2218251e11
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1615220b1b07280b
mov qword [rsp + 0x43], rdx
movabs rdx, 0x1919140b0d090b0e
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x4a16e7
movzx r9d, byte [rsp + rsi + 0x53]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x53], dl
mov byte [rsp + rsi + 0x53], r8b
add rax, 2
cmp rax, 0x3a
jge 0x4a171c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x4a173f
movzx r8d, byte [rsp + rdi + 0x53]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x2d
jb 0x4a16cd
jmp 0x4a1733
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x2d
call fcn.00444780
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00456420
mov eax, edi
mov ecx, 0x2d
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004a15e0
Function at 0x4a5000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a514c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x607233572741614d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3bfe41574279f1e9
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2c3a204c6f205c01
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2d0a65749c752f67
mov qword [rsp + 0x68], rdx
movabs rdx, 0x35e5ec04204118e4
mov qword [rsp + 0x70], rdx
movabs rdx, 0x10252225251b181e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1e111b0710252225
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1526140c1f201822
mov qword [rsp + 0x28], rdx
movabs rdx, 0x19231625030e030e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2119270f05042205
mov qword [rsp + 0x38], rdx
movabs rdx, 0x26210e240815180b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x26150e020d171709
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a50e4
movzx r9d, byte [rsp + rsi + 0x50]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rdi + 0x50], dl
mov byte [rsp + rsi + 0x50], r8b
add rax, 2
cmp rax, 0x34
jge 0x4a511c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x28
jae 0x4a513f
movzx r8d, byte [rsp + rdi + 0x50]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x11]
cmp rsi, 0x28
jb 0x4a50ca
jmp 0x4a5133
xor eax, eax
lea rbx, [rsp + 0x50]
mov ecx, 0x28
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00456420
mov eax, edi
mov ecx, 0x28
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004a5000

Function at 0x4a8e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8f2a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x49747b654f196472
mov qword [rsp + 0x35], rdx
movabs rdx, 0x50024249747b654f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3f654a5b3f57655d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x908030a020d120e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1003080712100908
mov qword [rsp + 0x25], rdx
movabs rdx, 0x20b1205100a010f
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4a8ecd
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x4a8efa
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a8f1d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4a8eb0
jmp 0x4a8f11
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004a8e40
Function at 0x4aa240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa38c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x2ee8639659485235
mov qword [rsp + 0x49], rdx
movabs rdx, 0x4d42fc65756cb300
mov qword [rsp + 0x51], rdx
movabs rdx, 0x4766520aff651e4d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x4424f2230a51782d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x146220096c62bb52
mov qword [rsp + 0x68], rdx
movabs rdx, 0x3107450661206574
mov qword [rsp + 0x70], rdx
movabs rdx, 0x8172d171b20181c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x16171e010919031f
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2e182e040f10130d
mov qword [rsp + 0x29], rdx
movabs rdx, 0x62b0f18202c1926
mov qword [rsp + 0x31], rdx
movabs rdx, 0x1b06261d12062e00
mov qword [rsp + 0x39], rdx
movabs rdx, 0x20f1a2314172b06
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x4aa324
movzx r9d, byte [rsp + rsi + 0x49]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x49], dl
mov byte [rsp + rsi + 0x49], r8b
add rax, 2
cmp rax, 0x30
jge 0x4aa35c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2f
jae 0x4aa37f
movzx r8d, byte [rsp + rdi + 0x49]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0x2f
jb 0x4aa30a
jmp 0x4aa373
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x2f
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00456420
mov eax, edi
mov ecx, 0x2f
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004aa240

Function at 0x4aa9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aaaa6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4567cf1d20363433
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x46313145
movabs rdx, 0x707010005070802
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x4070a09
xor eax, eax
jmp 0x4aaa40
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4aaa72
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4aaa97
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0xb
jb 0x4aaa24
jmp 0x4aaa8b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004aa9e0
Function at 0x4ab060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x4ab1f5
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0x74baf3f3716e2b6e
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd6bc6e5e6f2a3415
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc802ca7061b32030
mov qword [rsp + 0x70], rdx
movabs rdx, 0x3e9666ddd65734c
mov qword [rsp + 0x78], rdx
movabs rdx, 0x8ac5982d25b0e659
mov qword [rsp + 0x80], rdx
movabs rdx, 0x7a69102604657533
mov qword [rsp + 0x88], rdx
movabs rdx, 0xb832ae6c3676002e
mov qword [rsp + 0x90], rdx
movabs rdx, 0x220f0e0508360c0e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc08220f0e050836
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1c063727351e2520
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1f261531160f0329
mov qword [rsp + 0x30], rdx
movabs rdx, 0x22080312062c0c17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b0337101e1f2d22
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc35210929201026
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12332b15252c2804
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10a302723281835
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ab194
movzx r9d, byte [rsp + rsi + 0x60]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x60], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x60], dl
add rax, 2
cmp rax, 0x42
jge 0x4ab1c2
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x38
jae 0x4ab1e8
movzx r8d, byte [rsp + rdi + 0x60]
sub r8d, edx
cmp rsi, 0x38
jb 0x4ab177
nop
jmp 0x4ab1dc
xor eax, eax
lea rbx, [rsp + 0x60]
mov ecx, 0x38
call fcn.00444780
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x38
call fcn.00456420
mov eax, edi
mov ecx, 0x38
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004ab060
Function at 0x4ac680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac7cc
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x201a724d281d1d63
mov qword [rsp + 0x53], rdx
movabs rdx, 0x6161ff3d6d201a72
mov qword [rsp + 0x58], rdx
movabs rdx, 0x346874413254285b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x160f744f1b407458
mov qword [rsp + 0x68], rdx
movabs rdx, 0x6c282d3c2f20205d
mov qword [rsp + 0x70], rdx
movabs rdx, 0x181f1b10190b0a0a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20e0123181f1b10
mov qword [rsp + 0x23], rdx
movabs rdx, 0x209150a06182124
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1b1d1f1714220f15
mov qword [rsp + 0x33], rdx
movabs rdx, 0x170e0424041c0923
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x20031d010d0b181f
mov qword [rsp + 0x43], rdx
movabs rdx, 0xe0e021106101f17
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x4ac764
movzx r9d, byte [rsp + rsi + 0x53]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x14]
mov byte [rsp + rdi + 0x53], dl
mov byte [rsp + rsi + 0x53], r8b
add rax, 2
cmp rax, 0x34
jge 0x4ac79c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x4ac7bf
movzx r8d, byte [rsp + rdi + 0x53]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x14]
cmp rsi, 0x25
jb 0x4ac74a
jmp 0x4ac7b3
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x25
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00456420
mov eax, edi
mov ecx, 0x25
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004ac680
Function at 0x4b1760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b18a7
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xc290a947727c1db9
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x8bd1c290a947727c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa66cbccbf2eebfb8
mov qword [rsp + 0x58], rdx
movabs rdx, 0x729cf78b9d1ccade
mov qword [rsp + 0x60], rdx
movabs rdx, 0xcbad3b7265766fa9
mov qword [rsp + 0x68], rdx
movabs rdx, 0x6130603090d0704
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc1806130603090d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x901200712160908
mov qword [rsp + 0x26], rdx
movabs rdx, 0x221091a1f1a0609
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x508171521091f06
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1411160f010a1815
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb1820090e110004
mov qword [rsp + 0x46], rdx
xor eax, eax
jmp 0x4b1847
movzx r9d, byte [rsp + rsi + 0x4e]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rsp + rdi + 0x4e], dl
lea edx, [r8 - 0x17]
mov byte [rsp + rsi + 0x4e], dl
add rax, 2
cmp rax, 0x32
jge 0x4b1877
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x4b189a
movzx r8d, byte [rsp + rdi + 0x4e]
sub r8d, edx
cmp rsi, 0x22
jb 0x4b182a
jmp 0x4b188e
xor eax, eax
lea rbx, [rsp + 0x4e]
mov ecx, 0x22
call fcn.00444780
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00456420
mov eax, edi
mov ecx, 0x22
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004b1760

Function at 0x4b3780
Capabilities:
Decrypt data using aes via x86 extensions

Disassembly:
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x20]
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rbx]
add rax, 0x10
pxor xmm0, xmm1
sub rcx, 0xc
je 0x4b37bf
jb 0x4b37d4
movups xmm1, xmmword [rax]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesdec xmm0, xmm1
add rax, 0x20
movups xmm1, xmmword [rax]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesdec xmm0, xmm1
add rax, 0x20
movups xmm1, xmmword [rax]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x20]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x30]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x40]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x50]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x60]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x70]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x80]
aesdec xmm0, xmm1
movups xmm1, xmmword [rax + 0x90]
aesdeclast xmm0, xmm1
movups xmmword [rdx], xmm0
ret
Function at 0x4b3840
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
push rbp
mov rbp, rsp
mov rcx, qword [rsp + 0x10]
mov rax, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
add rbx, 0x10
pxor xmm4, xmm4
cmp ecx, 0xc
je 0x4b3914
jb 0x4b3973
movups xmm2, xmmword [rax + 0x10]
movups xmmword [rbx], xmm2
add rbx, 0x10
aeskeygenassist xmm1, xmm2, 1
call fcn.004b3720
aeskeygenassist xmm1, xmm0, 1
call fcn.004b3740
aeskeygenassist xmm1, xmm2, 2
call fcn.004b3720
aeskeygenassist xmm1, xmm0, 2
call fcn.004b3740
aeskeygenassist xmm1, xmm2, 4
call fcn.004b3720
aeskeygenassist xmm1, xmm0, 4
call fcn.004b3740
aeskeygenassist xmm1, xmm2, 8
call fcn.004b3720
aeskeygenassist xmm1, xmm0, 8
call fcn.004b3740
aeskeygenassist xmm1, xmm2, 0x10
call fcn.004b3720
aeskeygenassist xmm1, xmm0, 0x10
call fcn.004b3740
aeskeygenassist xmm1, xmm2, 0x20
call fcn.004b3720
aeskeygenassist xmm1, xmm0, 0x20
call fcn.004b3740
aeskeygenassist xmm1, xmm2, 0x40
call fcn.004b3720
jmp 0x4b39e1
movq xmm2, qword [rax + 0x10]
aeskeygenassist xmm1, xmm2, 1
call fcn.004b3680
aeskeygenassist xmm1, xmm2, 2
call fcn.004b36e0
aeskeygenassist xmm1, xmm2, 4
call fcn.004b3680
aeskeygenassist xmm1, xmm2, 8
call fcn.004b36e0
aeskeygenassist xmm1, xmm2, 0x10
call fcn.004b3680
aeskeygenassist xmm1, xmm2, 0x20
call fcn.004b36e0
aeskeygenassist xmm1, xmm2, 0x40
call fcn.004b3680
aeskeygenassist xmm1, xmm2, 0x80
call fcn.004b36e0
jmp 0x4b39e1
aeskeygenassist xmm1, xmm0, 1
call fcn.004b3640
aeskeygenassist xmm1, xmm0, 2
call fcn.004b3640
aeskeygenassist xmm1, xmm0, 4
call fcn.004b3640
aeskeygenassist xmm1, xmm0, 8
call fcn.004b3640
aeskeygenassist xmm1, xmm0, 0x10
call fcn.004b3640
aeskeygenassist xmm1, xmm0, 0x20
call fcn.004b3640
aeskeygenassist xmm1, xmm0, 0x40
call fcn.004b3640
aeskeygenassist xmm1, xmm0, 0x80
call fcn.004b3640
aeskeygenassist xmm1, xmm0, 0x1b
call fcn.004b3640
aeskeygenassist xmm1, xmm0, 0x36
call fcn.004b3640
sub rbx, 0x10
movups xmm1, xmmword [rbx]
movups xmmword [rdx], xmm1
dec rcx
movups xmm1, xmmword [rbx - 0x10]
aesimc xmm0, xmm1
movups xmmword [rdx + 0x10], xmm0
sub rbx, 0x10
add rdx, 0x10
dec rcx
jne 0x4b39ee
movups xmm0, xmmword [rbx - 0x10]
movups xmmword [rdx + 0x10], xmm0
pop rbp
ret
Function at 0x4c6940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c69fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3059811ec040569
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x98
movabs rdx, 0x206020508080303
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x4080701
xor eax, eax
nop
jmp 0x4c69a0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4c69cd
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c69f0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4c6982
jmp 0x4c69e4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456420
mov eax, edi
mov ecx, 9
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004c6940

Function at 0x4c7180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c727b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xed6e6937614d21ac
mov qword [rsp + 0x38], rdx
movabs rdx, 0xfb2eff95e4bfbf02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6e3c16c61e6563e8
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf09041607080202
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd0b09140e100007
mov qword [rsp + 0x20], rdx
movabs rdx, 0x130d070c0b0b0e0f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc01070c0915150a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c7219
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x20
jge 0x4c724b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c726e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x18
jb 0x4c71ff
jmp 0x4c7262
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456420
mov eax, edi
mov ecx, 0x18
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004c7180
Function at 0x4c7580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7647
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd6a0ffdba4a6da50
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xe59d6fd6
movabs rdx, 0x4010a0907000005
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x600090302070401
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4c75e8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x4c7617
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4c763a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c75cb
jmp 0x4c762e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c7580

Function at 0x4c9640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9767
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xde65d1750d0265d2
mov qword [rsp + 0x48], rdx
movabs rdx, 0xad0415a1e008746c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x78da75f76eb0693a
mov qword [rsp + 0x58], rdx
movabs rdx, 0xfa6c8704f3e461f8
mov qword [rsp + 0x60], rdx
movabs rdx, 0x8130b1a0d18000f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1313140206000705
mov qword [rsp + 0x24], rdx
movabs rdx, 0x100e141d13131402
mov qword [rsp + 0x28], rdx
movabs rdx, 0x318060817161c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd14080e080d160a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1d031f1b121d030c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c9709
movzx r9d, byte [rsp + rsi + 0x48]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x48], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x48], dl
add rax, 2
cmp rax, 0x2c
jge 0x4c9737
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x4c975a
movzx r8d, byte [rsp + rdi + 0x48]
sub r8d, edx
cmp rsi, 0x20
jb 0x4c96ec
jmp 0x4c974e
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00456420
mov eax, edi
mov ecx, 0x20
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c9640
Function at 0x4ccf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd01b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4f2f6f408e3a4b2
mov qword [rsp + 0x38], rdx
movabs rdx, 0x465f311ad767a25
mov qword [rsp + 0x40], rdx
movabs rdx, 0x72656582208703a0
mov qword [rsp + 0x48], rdx
movabs rdx, 0x100001008031209
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x11140307090c0012
mov qword [rsp + 0x22], rdx
movabs rdx, 0x504110207091114
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60d070b0b0a0f0f
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ccfb9
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4ccfeb
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4cd00e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
cmp rsi, 0x18
jb 0x4ccf9f
jmp 0x4cd002
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456420
mov eax, edi
mov ecx, 0x18
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004ccf20

Function at 0x4d0ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0bbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8240768c97717365
mov qword [rsp + 0x32], rdx
movabs rdx, 0x84726f3863688240
mov qword [rsp + 0x38], rdx
movabs rdx, 0x807000008060808
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x603030208070000
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa04070d07020805
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4d0b60
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4d0b8d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d0bb0
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d0b42
jmp 0x4d0ba4
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456420
mov eax, edi
mov ecx, 0xe
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004d0ae0