joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4702c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x47042c
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x3337ffc989603638
mov qword [rsp + 0x56], rdx
movabs rdx, 0xa501bfdab038cdee
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x69dea501bfdab038
mov qword [rsp + 0x60], rdx
movabs rdx, 0xeb19217660bdd44
mov qword [rsp + 0x68], rdx
movabs rdx, 0xd33305b1c03977c6
mov qword [rsp + 0x70], rdx
movabs rdx, 0x3532bfcb642bc736
mov qword [rsp + 0x78], rdx
movabs rdx, 0x191914051118171a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x150814240f17161f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1f240518080e1508
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1d2723121f052617
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0210030c112109
mov qword [rsp + 0x36], rdx
movabs rdx, 0x18101b1e1e252605
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1013240b260c1014
mov qword [rsp + 0x46], rdx
movabs rdx, 0x23051a0d0e261e04
mov qword [rsp + 0x4e], rdx
xor eax, eax
jmp 0x4703c7
movzx r9d, byte [rsp + rsi + 0x56]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x56], dl
mov byte [rsp + rsi + 0x56], r8b
add rax, 2
cmp rax, 0x3e
jge 0x4703fc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2a
jae 0x47041f
movzx r8d, byte [rsp + rdi + 0x56]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0x2a
jb 0x4703ad
jmp 0x470413
xor eax, eax
lea rbx, [rsp + 0x56]
mov ecx, 0x2a
call fcn.00447260
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.0045a040
mov eax, edi
mov ecx, 0x2a
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.004702c0
Function at 0x47acc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ada6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x379ac0340f3231c5
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9d656441e03fc28e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9080605000c0c0f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x60a0f030a0a0908
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb08090306050c0c
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x47ad40
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x47ad72
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x47ad97
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0x10
jb 0x47ad22
jmp 0x47ad8b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00447260
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045a040
mov eax, edi
mov ecx, 0x10
nop
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0047acc0

Function at 0x47e6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e758
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe5c46f6d6f5ab3e0
mov qword [rsp + 0x28], rdx
movabs rdx, 0x606070702060602
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x100
xor eax, eax
jmp 0x47e6f5
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x47e728
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47e74b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
nop
cmp rsi, 8
jb 0x47e6db
jmp 0x47e73f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045a040
mov eax, edi
mov ecx, 8
call fcn.0045a040
nop
call fcn.00457d60
nop dword [rax]
jmp fcn.0047e6a0

Function at 0x47fba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47fc5d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x14111b69656e4b28
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x13
movabs rdx, 0x5060707060800
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x108
xor eax, eax
nop
jmp 0x47fc00
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x47fc2d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47fc50
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x47fbe2
jmp 0x47fc44
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045a040
mov eax, edi
mov ecx, 9
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.0047fba0
Function at 0x480e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480ed8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6eaa777d88796547
mov qword [rsp + 0x28], rdx
movabs rdx, 0x403020202050506
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x304
xor eax, eax
jmp 0x480e75
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x480ea8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x480ecb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
nop
cmp rsi, 8
jb 0x480e5b
jmp 0x480ebf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045a040
mov eax, edi
mov ecx, 8
call fcn.0045a040
nop
call fcn.00457d60
nop dword [rax]
jmp fcn.00480e20

Function at 0x481520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4815f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf2c46c2f6a6e2b1b
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xe7646e6f91f2c46c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc08060407010000
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8040c010c040c08
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x48158c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x4815be
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4815e5
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
cmp rsi, 0xd
jb 0x481572
jmp 0x4815d5
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00447260
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.0045a040
mov eax, edi
mov ecx, 0xd
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.00481520

Function at 0x481920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4819fd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1a78c1abc16e6121
mov qword [rsp + 0x31], rdx
movabs rdx, 0xd46c67a11768b11a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0007000406060d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8070b0007000406
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd0e0a040d0a0503
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4819a0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4819cd
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4819f0
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x481982
jmp 0x4819e4
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00447260
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045a040
mov eax, edi
mov ecx, 0xf
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.00481920
Function at 0x482ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x482b78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x55b7d8bbe176614a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x304030703040306
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x705
xor eax, eax
jmp 0x482b18
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x482b48
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x482b6b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x482afb
jmp 0x482b5f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045a040
mov eax, edi
mov ecx, 8
call fcn.0045a040
nop
call fcn.00457d60
nop dword [rax]
jmp fcn.00482ac0

Function at 0x484e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484f1d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcc6925ce27cdcbdb
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc3aa2cb52175dd5f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0d07050202020b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3010f0d07050202
mov qword [rsp + 0x20], rdx
movabs rdx, 0x107090e0f040c00
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x484ec0
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x484eed
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x484f10
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x484ea2
jmp 0x484f04
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00447260
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045a040
mov eax, edi
mov ecx, 0x10
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.00484e40

Function at 0x485fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48606c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5f3db3545fb5f996
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xfe97095f
movabs rdx, 0x801020500010806
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x205010a02090801
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x486005
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x48603c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x48605f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0xb
jb 0x485feb
jmp 0x486053
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00447260
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045a040
mov eax, edi
mov ecx, 0xb
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.00485fa0
Function at 0x486e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486ee7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6dd38c97bd036c8f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6397
movabs rdx, 0x604050200020200
mov qword [rsp + 0x18], rdx
movabs rdx, 0x403040308050604
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x486e87
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x486eb7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x486eda
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x486e6a
jmp 0x486ece
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045a040
mov eax, edi
mov ecx, 0xa
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.00486e20

Function at 0x487cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487d87
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6894d3df9c646c8b
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7295
movabs rdx, 0x506030405030007
mov qword [rsp + 0x18], rdx
movabs rdx, 0x807070307040506
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x487d27
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x12]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x12]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x487d57
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x487d7a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x487d0a
jmp 0x487d6e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045a040
mov eax, edi
mov ecx, 0xa
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.00487cc0

Function at 0x487da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487e78
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe03dfa774b684300
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xe361f40
movabs rdx, 0xb0a030103090a0b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5000b0a03010309
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5060005080b0700
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x487e14
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x487e48
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x487e6b
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
nop
cmp rsi, 0xc
jb 0x487dfa
jmp 0x487e5f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00447260
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a040
mov eax, edi
mov ecx, 0xc
call fcn.0045a040
nop
call fcn.00457d60
nop dword [rax]
jmp fcn.00487da0
Function at 0x489a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489ad8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb2cd0e6996908ba5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x300060306000005
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x1020107
xor eax, eax
jmp 0x489a76
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x489aa8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x489acb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 8
jb 0x489a5c
jmp 0x489abf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045a040
mov eax, edi
mov ecx, 8
call fcn.0045a040
nop
call fcn.00457d60
nop dword [rax]
jmp fcn.00489a20

Function at 0x489b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489bb8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x37ce758f36d2cc56
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602040601070603
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x201
xor eax, eax
jmp 0x489b55
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x489b88
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x489bab
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
nop
cmp rsi, 8
jb 0x489b3b
jmp 0x489b9f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045a040
mov eax, edi
mov ecx, 8
call fcn.0045a040
nop
call fcn.00457d60
nop dword [rax]
jmp fcn.00489b00

Function at 0x48b0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b186
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x46d269b4edd48dd4
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x74
movabs rdx, 0x7060102030701
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 4
xor eax, eax
nop
jmp 0x48b120
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x48b152
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48b177
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 9
jb 0x48b102
jmp 0x48b16b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045a040
mov eax, edi
mov ecx, 9
nop
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0048b0c0
Function at 0x48b340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b40c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe215d70819306427
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x240de5e2
movabs rdx, 0xa05040007020008
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9060202030a0a05
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x48b3a5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x48b3dc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x48b3ff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0xb
jb 0x48b38b
jmp 0x48b3f3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00447260
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045a040
mov eax, edi
mov ecx, 0xb
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0048b340

Function at 0x48d300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48d3ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2b49e82437f5744f
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x342b49e82437f574
mov qword [rsp + 0x30], rdx
movabs rdx, 0x27501332fe16f97
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100905020e07100b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x10100c0b10090502
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4050208030d1005
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x48d38d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x48d3ba
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48d3dd
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x48d370
jmp 0x48d3d1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00447260
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045a040
mov eax, edi
mov ecx, 0x11
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0048d300
Function at 0x48db80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48dc4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5f6eb1abb274c51d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x78947444cce15f6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0a050a05080301
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9050a090c040004
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x48dbef
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x48dc1c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x48dc3f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x48dbd2
jmp 0x48dc33
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00447260
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045a040
mov eax, edi
mov ecx, 0xe
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0048db80

Function at 0x4904c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49057e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7053da75e66965fb
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x658cea70
movabs rdx, 0x503040905000103
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x8090304
xor eax, eax
jmp 0x490521
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x49054e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x490571
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x490504
jmp 0x490565
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045a040
mov eax, edi
mov ecx, 0xb
call fcn.0045a040
nop
nop
call fcn.00457d60
jmp fcn.004904c0
Function at 0x49d880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d97d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x753b6d4545657215
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6361744e4b4734f6
mov qword [rsp + 0x40], rdx
movabs rdx, 0x106734666096902
mov qword [rsp + 0x48], rdx
movabs rdx, 0x900171015171115
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc030c1217090811
mov qword [rsp + 0x24], rdx
movabs rdx, 0x41404080c030c12
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3151410060a160b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49d920
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x49d94d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49d970
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x49d8ff
jmp 0x49d964
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045a040
mov eax, edi
mov ecx, 0x18
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.0049d880

Function at 0x49dca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49dd9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2910070fb82fbb4
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x74188c1405520291
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8a33a0078c120bab
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb15120f060b0a0b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb0500110b021403
mov qword [rsp + 0x22], rdx
movabs rdx, 0x61300080e131007
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa000c0e0c030109
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x49dd40
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x49dd6d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x49dd90
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x49dd1f
jmp 0x49dd84
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045a040
mov eax, edi
mov ecx, 0x16
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.0049dca0