joyce8/EMBER2024-capa huggingface dataset:
Function at 0x483720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4837fd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf1a9b2ae3499deee
mov qword [rsp + 0x19], rdx
movabs rdx, 0xad32f0f46ef1a9b2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x906080702010a05
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9090608070201
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa010c040701040c
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4837a0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4837cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4837f0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x483782
jmp 0x4837e4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457ea0
mov eax, edi
mov ecx, 0xd
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.00483720

Function at 0x483820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483906
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x444b7f376b494c85
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x424961306536444b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90b05030500
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10507090000090b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3020d0006060c0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4838a0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x26]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4838d2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4838f7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x26]
cmp rsi, 0xe
jb 0x483882
jmp 0x4838eb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457ea0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00483820
Function at 0x485160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485268
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x347398b811a3840f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x943638a4a019a534
mov qword [rsp + 0x26], rdx
movabs rdx, 0x38bd213c9f38a992
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x606050f12080e00
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6140606050f1208
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30b0a010e160810
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12140b020209020a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15061004140e1306
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x48520b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x22
jge 0x485238
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x48525b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4851ee
jmp 0x48524f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00485160

Function at 0x485280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48537b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa533b5a0c836117d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa3a7ab39c61b2931
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb229121ab5ac9eb7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100e13050910030b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x150f17161707120a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10d0f140014150f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17040d1612000f11
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x485319
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x48534b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x48536e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0x18
jb 0x4852ff
jmp 0x485362
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457ea0
mov eax, edi
mov ecx, 0x18
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.00485280
Function at 0x485740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48585a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8784389930312364
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3091e03392cb3534
mov qword [rsp + 0x25], rdx
movabs rdx, 0x8a3091e03392cb35
mov qword [rsp + 0x26], rdx
movabs rdx, 0x359ce93c86967d15
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110115130412120b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe13110115130412
mov qword [rsp + 0x38], rdx
movabs rdx, 0x615171412161310
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130b110e070a17
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130b0b010e0d1415
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4857f7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x22
jge 0x485829
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x48584d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x19
jb 0x4857dd
jmp 0x485841
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00445b60
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457ea0
mov eax, edi
mov ecx, 0x19
call fcn.00457ea0
nop
call fcn.00455c20
nop
jmp fcn.00485740

Function at 0x486fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4870d8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x2b08062f31081126
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x212b08062f310811
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xeb200915303735ce
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3835323234383130
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x13552c26ff310a13
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1c1d1f1c04110213
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1b172009010b0011
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1e1b1b172009010b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb071010070f0810
mov qword [rsp + 0x50], rdx
movabs rdx, 0x519201f0805111b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe13061a08071c0d
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x487075
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4870a8
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4870cb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
nop
cmp rsi, 0x21
jb 0x48705b
jmp 0x4870bf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.00445b60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00457ea0
mov eax, edi
mov ecx, 0x21
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.00486fa0
Function at 0x488520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488647
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x357b35355d949788
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe6735d9c9a313635
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7f739cba3135d231
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf0327630db87ac8b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7832f038989b3530
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc160d06061c0324
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa221826001a2416
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe00210210151315
mov qword [rsp + 0x50], rdx
movabs rdx, 0x140d1e1915001801
mov qword [rsp + 0x58], rdx
movabs rdx, 0x17140319160b0124
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4885e9
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x28
jge 0x488617
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x27
jae 0x48863a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x27
jb 0x4885cc
jmp 0x48862e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x27
call fcn.00445b60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.00457ea0
mov eax, edi
mov ecx, 0x27
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00488520
Function at 0x4904c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4905f8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x46826f3da8753ed8
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc3768546826f3da8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x756cbaeaa85fdb8a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7e77af697790ca65
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x799172207165e2c8
mov qword [rsp + 0x34], rdx
movabs rdx, 0x200d1e0c190f101c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb060d0008031e0a
mov qword [rsp + 0x44], rdx
movabs rdx, 0x421000e0b060d00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x101422060d18141b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1151915121b190e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e091b0d0b0e1a0f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x490595
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4905c8
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4905eb
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
nop
cmp rsi, 0x23
jb 0x49057b
jmp 0x4905df
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x23
call fcn.00445b60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00457ea0
mov eax, edi
mov ecx, 0x23
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.004904c0
Function at 0x49ae20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49af2c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x46e77df3b016e09
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf637a399204933a4
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb4fef637a3992049
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1b28696b311f65dd
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80711100e030f09
mov qword [rsp + 0x34], rdx
movabs rdx, 0x902180c190d0910
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x181119180902180c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1900041407041215
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x49aec8
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x49aefc
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x49af1f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0x1a
jb 0x49aeae
jmp 0x49af13
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1a
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0049ae20

Function at 0x49e6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e7a6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcc256500c725c220
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc0bc1818781bcc25
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40304090d0b0708
mov qword [rsp + 0x26], rdx
movabs rdx, 0x606040304090d0b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8010b0a0c080402
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x49e740
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x45]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x49e772
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49e797
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x45]
cmp rsi, 0xe
jb 0x49e722
jmp 0x49e78b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457ea0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0049e6c0
Function at 0x4a1c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a1d1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4b681c732a462069
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x78
movabs rdx, 0x207020805030806
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8020602
xor eax, eax
nop
jmp 0x4a1cc0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4a1ced
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a1d10
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4a1ca2
jmp 0x4a1d04
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00457ea0
mov eax, edi
mov ecx, 9
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004a1c60
Function at 0x4a4440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a456c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xa372a17e4996613b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xaf6368657c8b19af
mov qword [rsp + 0x24], rdx
movabs rdx, 0x92920b90d0066c86
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5af979e020ad7253
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1c140509121c1e13
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa16071f13050f1d
mov qword [rsp + 0x44], rdx
movabs rdx, 0x140f1a180a16071f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x151a081d1a151a15
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a1d0b131715121e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x10040d00020b1f05
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4a4506
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4a453c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x4a455f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0x20
jb 0x4a44ec
jmp 0x4a4553
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.00445b60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457ea0
mov eax, edi
mov ecx, 0x20
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004a4440

Function at 0x4a4bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4cdd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xb872a7770270614d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xece396ec2079e51f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6664006e691ece3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8678ec54690d75e6
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1805131904040f14
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd1a171505091805
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10110e0c15091907
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18040d121d17131b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d110817161a030f
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a4c80
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x6c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x6c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4a4cad
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4a4cd0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4a4c5d
jmp 0x4a4cc4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.00445b60
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1e
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004a4bc0
Function at 0x4a5780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a586c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2e4f4165563e2360
mov qword [rsp + 0x19], rdx
movabs rdx, 0x562e4f4165563e23
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4f5a1a2e56756361
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa050f00010f020a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc000a0a0c0e0a05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6100a030c05000e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a580a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a583c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a585f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x11
jb 0x4a57f0
jmp 0x4a5853
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457ea0
mov eax, edi
mov ecx, 0x11
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004a5780

Function at 0x4a5880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a59a7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xd5741a8ab5249f72
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6ad5741a8ab5249f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6e7e5257ca957218
mov qword [rsp + 0x28], rdx
movabs rdx, 0x616f9c6f5d707e64
mov qword [rsp + 0x30], rdx
movabs rdx, 0xaf5a6f6172205c12
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1f1a010d0f131405
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80901020e081918
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb03010e13041f1e
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb1f1217071f0c1f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7200b161f030d20
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4a5949
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x28
jge 0x4a5977
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x4a599a
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x21
jb 0x4a592c
jmp 0x4a598e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.00445b60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00457ea0
mov eax, edi
mov ecx, 0x21
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004a5880
Function at 0x4a7be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7d0c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xb4b8e5641f6665c4
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9107c34d5b4b8e5
mov qword [rsp + 0x20], rdx
movabs rdx, 0xfbc87365747942f6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x79622d6eb1fe206f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x79decdcdae80c0b6
mov qword [rsp + 0x38], rdx
movabs rdx, 0x170d090d130a1f1f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14051d23220314
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1809080b03200709
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd1521210c06041f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x81d04061e1e1e18
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4a7ca6
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x28
jge 0x4a7cdc
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x4a7cff
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x25
jb 0x4a7c8c
jmp 0x4a7cf3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.00445b60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00457ea0
mov eax, edi
mov ecx, 0x25
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004a7be0

Function at 0x4a8160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a824c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e7bb5ed6c1a652b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x761212e7bb5ed6c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc16574cd10900228
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6080c050512000b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40e12020d0f0608
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0d0d080d0a0a05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a81ea
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a821c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a823f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x13
jb 0x4a81d0
jmp 0x4a8233
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457ea0
mov eax, edi
mov ecx, 0x13
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004a8160
Function at 0x4a8260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8332
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x667c95c0c929b62
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xea5b40667c95c0c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x509010a04030703
mov qword [rsp + 0x28], rdx
movabs rdx, 0x402070408090109
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a82cc
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4a82fe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4a8325
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0xb
jb 0x4a82b2
jmp 0x4a8315
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004a8260

Function at 0x4a8340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a83fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb4b7b91218b577b9
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6e
movabs rdx, 0x307020600050604
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x107
xor eax, eax
nop
jmp 0x4a83a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4a83cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a83f0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4a8382
jmp 0x4a83e4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00457ea0
mov eax, edi
mov ecx, 9
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004a8340