joyce8/EMBER2024-capa huggingface dataset:
Function at 0x478820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4788e8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe26369d1cb6fdf50
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xbee8
movabs rdx, 0x308010107070809
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x403
xor eax, eax
jmp 0x478882
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xa
jge 0x4788b4
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4788db
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0xa
jb 0x478868
jmp 0x4788cf
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00478820

Function at 0x478c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478cf2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x72745d5072487453
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x5a72
movabs rdx, 0x109070606010604
mov qword [rsp + 0x22], rdx
movabs rdx, 0x906040506020109
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x478c8a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x478cbc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x478ce5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0xa
jb 0x478c70
jmp 0x478cd7
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00478c20
Function at 0x478d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478ddc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xfb8da2896e676953
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe298a1fb8da2896e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x904070605070807
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x709070a0a040904
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x478d72
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x478da8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x478dcf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
nop dword [rax]
cmp rsi, 0xb
jb 0x478d58
jmp 0x478dc3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.00478d00

Function at 0x4799a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479a5c
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x6867535e695e5554
mov qword [rsp + 0x20], rdx
movabs rdx, 0x202040101050105
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4799f4
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x479a28
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x479a4f
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
nop
cmp rsi, 8
jb 0x4799da
jmp 0x479a43
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.004418e0
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00453440
mov eax, edi
mov ecx, 8
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004799a0
Function at 0x47b8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b972
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2a6fa83930086f14
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c2f3214
movabs rdx, 0x808000802090005
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa03090804070808
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47b90b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x47b93d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x47b965
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0xc
jb 0x47b8f1
jmp 0x47b958
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0047b8a0

Function at 0x47bd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47be3c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe0a15f72cdebd643
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe269d365e3336870
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3060a01030a0b0f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x70d0d0002010d03
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x47bdd2
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x47be08
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x47be2f
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
nop dword [rax]
cmp rsi, 0x10
jb 0x47bdb8
jmp 0x47be23
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453440
mov eax, edi
mov ecx, 0x10
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.0047bd60
Function at 0x47da80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47db76
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x35638e6574ce6453
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2a35638e6574ce64
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x26b26e246dd114d4
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0a0502100f010a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50d09020b0a0502
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8070b091007020a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47db13
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x5c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x5c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x47db42
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47db69
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x47daf6
nop
jmp 0x47db5d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453440
mov eax, edi
mov ecx, 0x11
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.0047da80

Function at 0x47dba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47dc72
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x79485e5f59625a53
mov qword [rsp + 0x19], rdx
movabs rdx, 0x415b7979485e5f59
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30201020a050506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x807090a
xor eax, eax
jmp 0x47dc0e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x47dc3b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47dc65
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x47dbf1
jmp 0x47dc56
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0047dba0
Function at 0x485ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485bb3
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movzx edx, byte [rax + 0x14]
cmp word [rax + 0x30], 0
je 0x485b23
movabs rsi, 0x4497379b9108c5e2
mov qword [rsp + 0x33], rsi
movabs rsi, 0x70c701065c449737
mov qword [rsp + 0x38], rsi
movabs rsi, 0x2ae258d8ff61eb96
mov qword [rsp + 0x26], rsi
movabs rsi, 0x40e73f26282ae258
mov qword [rsp + 0x2b], rsi
xor ecx, ecx
jmp 0x485b48
xor eax, eax
xor ebx, ebx
mov rcx, rbx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
movzx esi, byte [rsp + rcx + 0x33]
movzx edi, byte [rsp + rcx + 0x26]
xor edi, esi
mov byte [rsp + rcx + 0x26], dil
inc rcx
cmp rcx, 0xd
jl 0x485b34
mov qword [rsp + 0x70], rax
test dl, 1
mov edx, 0x38
mov esi, 0x48
cmovne rdx, rsi
mov qword [rsp + 0x18], rdx
lea rax, [rsp + 0x40]
lea rbx, [rsp + 0x26]
mov ecx, 0xd
call fcn.004418e0
mov rdx, qword [rsp + 0x70]
movzx ecx, word [rdx + 0x30]
mov rsi, qword [rsp + 0x18]
lea rax, [rdx + rsi]
cmp rcx, 0x100000
ja 0x485ba5
mov rbx, rcx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rdx, rcx
mov ebx, 0x100000
call fcn.00453540
nop
mov qword [rsp + 8], rax
call fcn.00450de0
mov rax, qword [rsp + 8]
jmp fcn.00485ac0
Function at 0x48dec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e006
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x7482646f4b746558
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x642b7a147482646f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65a670687e207a6e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e4264200371412c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x955e69af2d9b7469
mov qword [rsp + 0x36], rdx
movabs rdx, 0x806071a160f1417
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa1c0b0009102216
mov qword [rsp + 0x46], rdx
movabs rdx, 0x231e0a1c0b000910
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd1a1110030a1f09
mov qword [rsp + 0x50], rdx
movabs rdx, 0x101a210808120820
mov qword [rsp + 0x58], rdx
movabs rdx, 0x11121f1e081f0a09
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x48dfa0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x48dfcd
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x48dff4
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x24
jb 0x48df82
jmp 0x48dfe8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x24
call fcn.004418e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x24
call fcn.00453440
mov eax, edi
mov ecx, 0x24
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0048dec0

Function at 0x48e020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e128
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x744945ccaed56e29
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6176200eed744945
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1ec11873cacd19af
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x408130300080e14
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe0406060e120405
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd0900060e040606
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140210080e0d0f00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x48e0c2
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1c
jge 0x48e0ef
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x48e11b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x48e0a5
jmp 0x48e10f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453440
mov eax, edi
mov ecx, 0x15
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0048e020
Function at 0x48ffc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x490088
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x243e63b6c0a6504
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x20
movabs rdx, 0x204020700060504
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x206
xor eax, eax
jmp 0x490020
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x490052
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x49007b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 9
jb 0x490006
jmp 0x49006f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453440
mov eax, edi
mov ecx, 9
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0048ffc0
Function at 0x494240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49430b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8b206463834e9e74
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x203d
movabs rdx, 0x403070204070104
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2010102
xor eax, eax
jmp 0x4942a6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4942d7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4942fe
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x494289
jmp 0x4942f2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00494240
Function at 0x495a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x495be6
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x81151c656c474d6d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7464728054487f54
mov qword [rsp + 0x21], rdx
movabs rdx, 0x11024a206c746472
mov qword [rsp + 0x26], rdx
movabs rdx, 0x527659694e3a3a39
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x48452b686e53693d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5d605612ef20893e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x201421090e211c2a
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1f092c0f16222126
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xc0c1f092c0f1622
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15160712291805
mov qword [rsp + 0x58], rdx
movabs rdx, 0x12214162b241223
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa0a231d06231d28
mov qword [rsp + 0x68], rdx
movabs rdx, 0xa1a13082502002b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x232405091a0b2a2a
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x495b76
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x3a
jge 0x495ba8
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x495bd5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0x2d
jb 0x495b5c
jmp 0x495bc9
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.004418e0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00453440
mov eax, edi
mov ecx, 0x2d
nop dword [rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00495a60
Function at 0x496260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x496412
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0x2e0b1965d51c982c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xed2e0b1965d51c98
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa6c011e3b75f41c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2c486c1220a09163
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9f6ee723fa6f3c65
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5961731c2ef6642b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1260ce1509b22cb2
mov qword [rsp + 0x46], rdx
movabs rdx, 0x100e02051a2f10
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xd0900100e02051a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2c150003092a2c2b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d08202f17100a20
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2023012d030c1c1a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x180a231302292824
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2e131e0d000e2e24
mov qword [rsp + 0x78], rdx
movabs rdx, 0x122d3015230c2402
mov qword [rsp + 0x80], rdx
movabs rdx, 0x202d212518180e06
mov qword [rsp + 0x88], rdx
xor eax, eax
nop
jmp 0x4963a0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x42
jge 0x4963d2
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x496405
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x31
jb 0x496382
jmp 0x4963f5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x31
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x31
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0x31
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00496260
Function at 0x4967a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x496912
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x2ee1633e0fb06572
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcd25316051e6191
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbaceb1535b70cd2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb76e69baf26369c6
mov qword [rsp + 0x34], rdx
movabs rdx, 0xdd200cbc6f201a44
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x22a5731a6f1c3a2f
mov qword [rsp + 0x44], rdx
movabs rdx, 0x2b060f2d022c0d02
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x251a130e2b060f2d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2a112c1f0a22021d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x111619080f280b12
mov qword [rsp + 0x60], rdx
movabs rdx, 0x11261410061a2525
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1015030c02162719
mov qword [rsp + 0x70], rdx
movabs rdx, 0xa0204232b1e2823
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4968aa
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x34
jge 0x4968d7
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2e
jae 0x496905
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x2e
jb 0x49688d
jmp 0x4968f8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2e
call fcn.004418e0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2e
nop
call fcn.00453440
mov eax, edi
mov ecx, 0x2e
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004967a0
Function at 0x496920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x496a86
sub rsp, 0xb8
mov qword [rsp + 0xb0], rbp
lea rbp, [rsp + 0xb0]
movabs rdx, 0x3a707b7b50666881
mov qword [rsp + 0x18], rdx
movabs rdx, 0x79419ffc665d6917
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6a3d6c61562e7941
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6565857f906ff787
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3eee6e57552e5a75
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2b2055845859763f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x9534fe68566ca44d
mov qword [rsp + 0x46], rdx
movabs rdx, 0x726bcfa569185c8b
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x13c373a16002a1a
mov qword [rsp + 0x56], rdx
movabs rdx, 0x8330d0d2535341e
mov qword [rsp + 0x5e], rdx
lea rdi, [rsp + 0x60]
lea rsi, [0x006d2e42]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00453a5a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x496a19
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x5a
jge 0x496a4b
movzx edx, byte [rsp + rax + 0x56]
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3e
jae 0x496a78
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0x3e
jb 0x4969ff
jmp 0x496a6c
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x3e
call fcn.004418e0
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov eax, esi
mov ecx, 0x3e
call fcn.00453440
mov eax, edi
mov ecx, 0x3e
nop
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00496920
Function at 0x498860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4989b2
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x3fe01774f024704d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e4e702fbbe3654b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x78cd21080a206465
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf605655bac756168
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1c19bc2a07659dd0
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x2116150f01150a26
mov qword [rsp + 0x46], rdx
movabs rdx, 0x6072116150f0115
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0f23131b022621
mov qword [rsp + 0x50], rdx
movabs rdx, 0x27240b0d0a0c0e24
mov qword [rsp + 0x58], rdx
movabs rdx, 0x140e05070707051c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x227072505160b15
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1f0c161e20030d14
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x49894a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x32
jge 0x49897c
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4989a5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x28
jb 0x498930
jmp 0x498997
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x28
call fcn.004418e0
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x28
nop
call fcn.00453440
mov eax, edi
mov ecx, 0x28
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00498860