joyce8/EMBER2024-capa huggingface dataset:
Function at 0x464900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x464a38
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xdf4ad8d9725164cb
mov qword [rsp + 0x45], rdx
movabs rdx, 0x343933df4ad8d972
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3436b3db4546da30
mov qword [rsp + 0x50], rdx
movabs rdx, 0xbe3630d79bb9c6b6
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe24ae63342d439bb
mov qword [rsp + 0x60], rdx
movabs rdx, 0x22110051716100c
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd061d0e1e15150f
mov qword [rsp + 0x21], rdx
movabs rdx, 0x141a0e140d061d0e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1d1b101316001501
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x60d1e0022070202
mov qword [rsp + 0x35], rdx
movabs rdx, 0x415202103200513
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x4649d8
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
cmp rax, 0x2c
jge 0x464a08
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x464a2b
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x23
jb 0x4649bb
jmp 0x464a1f
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x23
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00456420
mov eax, edi
mov ecx, 0x23
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.00464900

Function at 0x464a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x464bac
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xb43239d530fad7fd
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x303938eab43239d5
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3631369bdc923689
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa55e66877c2f0e39
mov qword [rsp + 0x60], rdx
movabs rdx, 0x75329daa907936e3
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1b15210a07151521
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7071b15210a0715
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1f201c1000021b15
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40818010c16021b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2302040e0c0f0018
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1f0c2107170f201a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x8191907101e150a
mov qword [rsp + 0x44], rdx
xor eax, eax
jmp 0x464b44
movzx r9d, byte [rsp + rsi + 0x4c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x4c], dl
mov byte [rsp + rsi + 0x4c], r8b
add rax, 2
cmp rax, 0x32
jge 0x464b7c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x24
jae 0x464b9f
movzx r8d, byte [rsp + rdi + 0x4c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x24
jb 0x464b2a
jmp 0x464b93
xor eax, eax
lea rbx, [rsp + 0x4c]
mov ecx, 0x24
call fcn.00444780
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00456420
mov eax, edi
mov ecx, 0x24
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00464a60
Function at 0x464bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x464d0c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x3081f5efead2bbd3
mov qword [rsp + 0x53], rdx
movabs rdx, 0xf83560f5123081f5
mov qword [rsp + 0x58], rdx
movabs rdx, 0xbaf20b54dedbbde5
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb76f3318f5360837
mov qword [rsp + 0x68], rdx
movabs rdx, 0x35cf89a534ba5ae2
mov qword [rsp + 0x70], rdx
movabs rdx, 0x81f001208030e16
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa0f1006081f0012
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1c0506020d210f1c
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x51919220c18231e
mov qword [rsp + 0x33], rdx
movabs rdx, 0x101101110a061b22
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xd04220911080109
mov qword [rsp + 0x43], rdx
movabs rdx, 0x161b23141d0f1213
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x464ca4
movzx r9d, byte [rsp + rsi + 0x53]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x53], dl
mov byte [rsp + rsi + 0x53], r8b
add rax, 2
cmp rax, 0x34
jge 0x464cdc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x464cff
movzx r8d, byte [rsp + rdi + 0x53]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0x25
jb 0x464c8a
jmp 0x464cf3
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x25
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00456420
mov eax, edi
mov ecx, 0x25
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00464bc0

Function at 0x4650e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x465227
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x37386756879c684d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7c40867087778b85
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5b353932a5786636
mov qword [rsp + 0x60], rdx
movabs rdx, 0x35c234aab6436962
mov qword [rsp + 0x68], rdx
movabs rdx, 0x30829dd29033bf32
mov qword [rsp + 0x70], rdx
movabs rdx, 0xa1a090d27250d1d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x21120e08001c1102
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd1d0f131e0e2123
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30b0013270c271b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x31d1b1704021801
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf261a0b12210d1e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110513190e052411
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4651c7
movzx r9d, byte [rsp + rsi + 0x50]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x50], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x50], dl
add rax, 2
cmp rax, 0x38
jge 0x4651f7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x28
jae 0x46521a
movzx r8d, byte [rsp + rdi + 0x50]
sub r8d, edx
cmp rsi, 0x28
jb 0x4651aa
jmp 0x46520e
xor eax, eax
lea rbx, [rsp + 0x50]
mov ecx, 0x28
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00456420
mov eax, edi
mov ecx, 0x28
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004650e0
Function at 0x46f1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f2c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcbc83534ff323293
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9c99265bf561c538
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0703030d01060b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0c0f0703030d01
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30106090e0d01
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x46f260
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x46f292
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x46f2b7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
cmp rsi, 0x10
jb 0x46f242
jmp 0x46f2ab
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456420
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0046f1e0

Function at 0x4769a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476a7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x30a9b566691c2548
mov qword [rsp + 0x31], rdx
movabs rdx, 0xd8d16725691b3930
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2060b0b0109090e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd0802060b0b0109
mov qword [rsp + 0x21], rdx
movabs rdx, 0x708070807050702
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x476a20
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x476a4d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x476a70
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x476a02
jmp 0x476a64
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456420
mov eax, edi
mov ecx, 0xf
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004769a0
Function at 0x476dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476ea6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x939bdbf9fe7089fa
mov qword [rsp + 0x30], rdx
movabs rdx, 0xce6961d861a941a7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50c0f0403000c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa0a040806030005
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60f070c08010400
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x476e40
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x476e72
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x476e97
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
cmp rsi, 0x10
jb 0x476e22
jmp 0x476e8b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456420
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00476dc0

Function at 0x4776c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477778
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2e73dbc29c93611b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x702030403020405
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x7040005
xor eax, eax
jmp 0x477716
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x477748
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47776b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 8
jb 0x4776fc
jmp 0x47775f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00456420
mov eax, edi
mov ecx, 8
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.004776c0

Function at 0x4777a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477858
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3722d26bad1ec4c3
mov qword [rsp + 0x28], rdx
movabs rdx, 0x201030006050107
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x105
xor eax, eax
jmp 0x4777f5
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x477828
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47784b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
nop
cmp rsi, 8
jb 0x4777db
jmp 0x47783f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00456420
mov eax, edi
mov ecx, 8
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.004777a0
Function at 0x478540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4785f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x416c72d665ed7deb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x206020101010602
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x4000206
xor eax, eax
jmp 0x478599
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x4785c8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4785eb
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x47857c
jmp 0x4785df
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00456420
mov eax, edi
mov ecx, 8
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.00478540

Function at 0x47bfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c06c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x937e01fbfa688c03
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xb6efd6d
movabs rdx, 0x906070509040b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700030601030009
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x47c005
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x47c03c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x47c05f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0xc
jb 0x47bfeb
jmp 0x47c053
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0047bfa0

Function at 0x47c7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c892
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x7bc9c573cd619750
mov qword [rsp + 0x20], rdx
movabs rdx, 0x107050305030706
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x47c831
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x47c85e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47c885
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x47c814
jmp 0x47c875
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00444780
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00456420
mov eax, edi
mov ecx, 8
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0047c7e0
Function at 0x47d280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d33d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x743c4ae132aa6138
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x61fd
movabs rdx, 0x800030600040200
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x8050004
xor eax, eax
jmp 0x47d2e0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x47d30d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47d330
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x47d2c3
jmp 0x47d324
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456420
mov eax, edi
mov ecx, 0xa
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.0047d280

Function at 0x47fa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47facc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x736f439b6964dac6
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xc090c8c1
movabs rdx, 0x801040907000b09
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0708070a010801
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x47fa65
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x47fa9c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x47fabf
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0xc
jb 0x47fa4b
jmp 0x47fab3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0047fa00

Function at 0x483620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4836e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf714f4cd7491f353
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x64197bf7
movabs rdx, 0x907050609020609
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x102050405080907
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x483688
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x4836b7
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4836da
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x48366b
jmp 0x4836ce
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00483620
Function at 0x488840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488912
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x50dd6566cd8ed65d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x729c74da693750dd
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0308010a030606
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6020c06080801
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4888ac
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4888de
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x488905
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
cmp rsi, 0xe
jb 0x488892
jmp 0x4888f5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00456420
mov eax, edi
mov ecx, 0xe
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00488840
Function at 0x49a000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a0ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e87b3c6a428a495
mov qword [rsp + 0x36], rdx
movabs rdx, 0x618b2e87b3c6a428
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe9cce7a72e65d775
mov qword [rsp + 0x40], rdx
movabs rdx, 0x51004050a080501
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x110f030b0f020000
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3110f0205010e06
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x49a08d
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jge 0x49a0ba
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49a0dd
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x49a070
jmp 0x49a0d1
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456420
mov eax, edi
mov ecx, 0x12
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0049a000

Function at 0x49b6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b76c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x33116c61d56e303c
mov qword [rsp + 0x29], rdx
movabs rdx, 0x4506ee6c61c5ff33
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70d030e08060d09
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6090c080e0e0701
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x49b70f
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x49b73c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49b75f
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x49b6f2
jmp 0x49b753
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456420
mov eax, edi
mov ecx, 0xf
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0049b6a0
Function at 0x49b780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b87d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2ec682856c7d74bb
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x93e2b06c9e2ec682
mov qword [rsp + 0x40], rdx
movabs rdx, 0x72b3c46e698c9f8a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf060d0013001312
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1080d0209020406
mov qword [rsp + 0x25], rdx
movabs rdx, 0x130c05010c0b0108
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xa0a0a0a0f120e13
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x49b820
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x49b84d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x49b870
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x49b7ff
jmp 0x49b864
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.0049b780

Function at 0x4a1580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a169a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x709695616c77bb6c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x87882e8268624e56
mov qword [rsp + 0x46], rdx
movabs rdx, 0x647087882e826862
mov qword [rsp + 0x48], rdx
movabs rdx, 0x656361688592745a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6011509050c0e11
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb06140b06011509
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x215110b0c150f01
mov qword [rsp + 0x26], rdx
movabs rdx, 0x12110c07160a0901
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1404100005170e0e
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4a1637
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x24
jge 0x4a1669
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a168d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0x1a
jb 0x4a161d
jmp 0x4a1681
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456420
mov eax, edi
mov ecx, 0x1a
call fcn.00456420
nop
call fcn.00454140
nop
jmp fcn.004a1580