joyce8/EMBER2024-capa huggingface dataset:
Function at 0x487ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487baa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x63e03474166cc5e
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x11063e03474166cc
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20006fe96f6cc263
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4000c07050f0607
mov qword [rsp + 0x19], rdx
movabs rdx, 0x30a000300030400
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd070108030c0c04
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x487b4d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x16
jge 0x487b7a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x487b9d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x487b30
jmp 0x487b91
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00487ac0

Function at 0x487bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487c7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x60643e3e536461dc
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x27
movabs rdx, 0x5040305000807
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x30307
xor eax, eax
nop
jmp 0x487c20
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x487c4d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x487c70
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x487c02
jmp 0x487c64
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00487bc0
Function at 0x487e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487f4c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xe9ce01653c660697
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xe1d13cb3e0e754e8
mov qword [rsp + 0x54], rdx
movabs rdx, 0x2074d0b1e1d13cb3
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc02a69b568486977
mov qword [rsp + 0x60], rdx
movabs rdx, 0xdf20b163e7595fc8
mov qword [rsp + 0x68], rdx
movabs rdx, 0x20bbf6afcba6f8c0
mov qword [rsp + 0x70], rdx
movabs rdx, 0xd24292501010923
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1e0a161f10181c24
mov qword [rsp + 0x24], rdx
movabs rdx, 0x726230a0e071b27
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1a16052a0626081d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2a1f08000f030b1a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x110f100f16280c21
mov qword [rsp + 0x44], rdx
xor eax, eax
jmp 0x487ee4
movzx r9d, byte [rsp + rsi + 0x4c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x4c], dl
mov byte [rsp + rsi + 0x4c], r8b
add rax, 2
cmp rax, 0x30
jge 0x487f1c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2c
jae 0x487f3f
movzx r8d, byte [rsp + rdi + 0x4c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x2c
jb 0x487eca
jmp 0x487f33
xor eax, eax
lea rbx, [rsp + 0x4c]
mov ecx, 0x2c
call fcn.0044d280
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2c
call fcn.00462ca0
mov eax, edi
mov ecx, 0x2c
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00487e00

Function at 0x487f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4880ac
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x8e9e6c657f956572
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x8f6c8e9e6c657f95
mov qword [rsp + 0x50], rdx
movabs rdx, 0x48384440a1c3e88c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x8d2074336f7c7862
mov qword [rsp + 0x60], rdx
movabs rdx, 0x91646175906f7578
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe10060d190b0c06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1d090e10060d190b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf0f0f01190f0921
mov qword [rsp + 0x26], rdx
movabs rdx, 0x141a02030a011607
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x312091c1b092112
mov qword [rsp + 0x36], rdx
movabs rdx, 0x140f1c021f051109
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1b19190708010110
mov qword [rsp + 0x46], rdx
xor eax, eax
jmp 0x488044
movzx r9d, byte [rsp + rsi + 0x4e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x4e], dl
mov byte [rsp + rsi + 0x4e], r8b
add rax, 2
cmp rax, 0x32
jge 0x48807c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x22
jae 0x48809f
movzx r8d, byte [rsp + rdi + 0x4e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x22
jb 0x48802a
jmp 0x488093
xor eax, eax
lea rbx, [rsp + 0x4e]
mov ecx, 0x22
call fcn.0044d280
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00462ca0
mov eax, edi
mov ecx, 0x22
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00487f60
Function at 0x4881e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x488388
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0x5874578d6c887b76
mov qword [rsp + 0x69], rdx
movabs rdx, 0x6e044e495d537258
mov qword [rsp + 0x70], rdx
movabs rdx, 0x5b6f61ee651c9c61
mov qword [rsp + 0x78], rdx
movabs rdx, 0x296c5a766a252052
mov qword [rsp + 0x80], rdx
movabs rdx, 0x41497f7b73472064
mov qword [rsp + 0x88], rdx
movabs rdx, 0x82654dfc56696d41
mov qword [rsp + 0x90], rdx
movabs rdx, 0x66446c61e7643c65
mov qword [rsp + 0x98], rdx
movabs rdx, 0x1029101a0b041e25
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x14350a071c320f02
mov qword [rsp + 0x27], rdx
movabs rdx, 0x2e2714350a071c32
mov qword [rsp + 0x29], rdx
movabs rdx, 0x82e232a131e2f14
mov qword [rsp + 0x31], rdx
movabs rdx, 0xe01270a24231716
mov qword [rsp + 0x39], rdx
movabs rdx, 0x2605233600142b1e
mov qword [rsp + 0x41], rdx
movabs rdx, 0x1112f0401112b1e
mov qword [rsp + 0x49], rdx
movabs rdx, 0x29022109352a270d
mov qword [rsp + 0x51], rdx
movabs rdx, 0x19301c27132b2f16
mov qword [rsp + 0x59], rdx
movabs rdx, 0xc050d0b3025251e
mov qword [rsp + 0x61], rdx
xor eax, eax
jmp 0x488323
movzx r9d, byte [rsp + rsi + 0x69]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x69], dl
mov byte [rsp + rsi + 0x69], r8b
add rax, 2
cmp rax, 0x4a
jge 0x488355
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x48837b
movzx r8d, byte [rsp + rdi + 0x69]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x37
jb 0x488309
jmp 0x48836f
xor eax, eax
lea rbx, [rsp + 0x69]
mov ecx, 0x37
call fcn.0044d280
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.00462ca0
mov eax, edi
mov ecx, 0x37
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004881e0
Function at 0x4883a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x4884fb
push rbp
mov rbp, rsp
sub rsp, 0xc0
movabs rdx, 0x262bdb76c66659e
mov qword [rsp + 0x7c], rdx
movabs rdx, 0x6547920262bdb7
mov qword [rsp + 0x80], rdx
movabs rdx, 0x4913f6105b39192d
mov qword [rsp + 0x88], rdx
movabs rdx, 0x30617318a92e02ef
mov qword [rsp + 0x90], rdx
movabs rdx, 0xdd6541388b19f4c9
mov qword [rsp + 0x98], rdx
movabs rdx, 0x2f201f151bb6ed20
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x6e215b694261afc5
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x576159686e5e582a
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x807e746ed9435720
mov qword [rsp + 0xb8], rdx
lea rdi, [rsp + 0x1c]
lea rsi, [0x00507350]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004632ac
mov rbp, qword [rbp]
xor eax, eax
jmp 0x488499
movzx r9d, byte [rsp + rsi + 0x7c]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x7c], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x7c], dl
add rax, 2
cmp rax, 0x60
jge 0x4884c8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x44
jae 0x4884ee
movzx r8d, byte [rsp + rdi + 0x7c]
sub r8d, edx
nop
cmp rsi, 0x44
jb 0x48847c
jmp 0x4884e2
xor eax, eax
lea rbx, [rsp + 0x7c]
mov ecx, 0x44
call fcn.0044d280
add rsp, 0xc0
pop rbp
ret
mov eax, esi
mov ecx, 0x44
call fcn.00462ca0
mov eax, edi
mov ecx, 0x44
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004883a0

Function at 0x488520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48863d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8274046599662457
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xa55bbfd756c18fe
mov qword [rsp + 0x45], rdx
movabs rdx, 0x2d61ab0a55bbfd75
mov qword [rsp + 0x48], rdx
movabs rdx, 0xdfa0746ea26fa29d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x119160f0f07120c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x141a0119160f0f07
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x190c0c0310010d07
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1a050d0500050313
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x10f03090c081a09
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x4885e0
movzx r9d, byte [rsp + rsi + 0x3d]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x3d], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x3d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x48860d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x488630
movzx r8d, byte [rsp + rdi + 0x3d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4885bd
jmp 0x488624
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1b
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00488520
Function at 0x4887e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4888dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1525e46507e49b88
mov qword [rsp + 0x39], rdx
movabs rdx, 0xa62e65ed6c575615
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc47a680565d9b2b4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x507100b07000009
mov qword [rsp + 0x19], rdx
movabs rdx, 0x211030f0f100610
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe1101020f0e1105
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1600150700000713
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x488880
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4888ad
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4888d0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x48885f
jmp 0x4888c4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004887e0

Function at 0x488c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488d0c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2e72f702b070384d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xaa16610fc9faffbe
mov qword [rsp + 0x42], rdx
movabs rdx, 0xa1656220b3d6aa16
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0780d981b65720a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x151a110510190c1b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa1508090b0f0315
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1611011a09050a15
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb16041d1a1d0f0e
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x488ca8
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x488cdc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x488cff
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x1e
jb 0x488c8e
jmp 0x488cf3
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1e
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00488c00
Function at 0x488d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488e0c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3d19677259745572
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x583d196772597455
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6e654c6864625d34
mov qword [rsp + 0x38], rdx
movabs rdx, 0x105060c0d090b04
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa0a090c06020105
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x809030a03050907
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x488daa
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xc]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x16
jge 0x488ddc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x488dff
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xc]
cmp rsi, 0x11
jb 0x488d90
jmp 0x488df3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00488d20

Function at 0x488f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48903d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf8f06356baecc672
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6a43d31a75088468
mov qword [rsp + 0x46], rdx
movabs rdx, 0xf9f66a43d31a7508
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe7051397fb4ef6e7
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf0d121506101514
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9040c130f0d1215
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x19190d1413041908
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1804041609110908
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10d0a1703070202
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x488fe0
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x48900d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x489030
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x488fbd
jmp 0x489024
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00488f20
Function at 0x489140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489267
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x2374170e0e417247
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x735c2374170e0e41
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe175c676e46722d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3764f23820782918
mov qword [rsp + 0x50], rdx
movabs rdx, 0x322c6e617253476f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1719130c07100216
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x31c1b001719130c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x110f0c0a0a052120
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc171c0405101c07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc21081201210018
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x489209
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x24
jge 0x489237
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x22
jae 0x48925a
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x22
jb 0x4891ec
jmp 0x48924e
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00462ca0
mov eax, edi
mov ecx, 0x22
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00489140

Function at 0x489280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48936a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2ea5b565a7f4ae17
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xac7f562ea5b565a7
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb4f165aba723b4bf
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20f0c060d11090e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x90d1205020f0c06
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x110b000b01030a0f
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x48930d
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x14
jge 0x48933a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x48935d
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4892f0
jmp 0x489351
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00489280
Function at 0x489380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4894a7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x3374db658a59439c
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x203374db658a5943
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3c9302c05ddd69c8
mov qword [rsp + 0x48], rdx
movabs rdx, 0xdb742c00d678a5da
mov qword [rsp + 0x50], rdx
movabs rdx, 0x62676eed7220c76f
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe0b0900160b1a15
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd0f1403071a0e0b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1d1a0b01020d100b
mov qword [rsp + 0x27], rdx
movabs rdx, 0x10181105020d0d20
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x120b0b0c120e181a
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x489449
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x26
jge 0x489477
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x48949a
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x21
jb 0x48942c
jmp 0x48948e
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x21
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00462ca0
mov eax, edi
mov ecx, 0x21
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00489380

Function at 0x4894c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4895dd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xb5d4dcd402037473
mov qword [rsp + 0x44], rdx
movabs rdx, 0x6ff69072cac66f80
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x8e74b2186ff69072
mov qword [rsp + 0x50], rdx
movabs rdx, 0x908bb424addbe626
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf0713080207101b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x19190b1a0a180117
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80a08031b061b01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa05031704100311
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd04150e17050316
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x489580
movzx r9d, byte [rsp + rsi + 0x44]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x44], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x44], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4895ad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4895d0
movzx r8d, byte [rsp + rdi + 0x44]
sub r8d, edx
cmp rsi, 0x1c
jb 0x48955d
jmp 0x4895c4
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1c
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004894c0
Function at 0x489600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4896ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3d3038136c046572
mov qword [rsp + 0x36], rdx
movabs rdx, 0x466c3d3038136c04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5f1f064551422c60
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd05060a0b080709
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40d100211110f07
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa091008020c0707
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x48968a
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x4896bc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4896df
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x12
jb 0x489670
jmp 0x4896d3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00489600

Function at 0x489980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489ab8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x2e1a0442f60d0680
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x1675b961172e1a04
mov qword [rsp + 0x50], rdx
movabs rdx, 0x32201d6533b2422e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2e1d440f3211e9a2
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2e617a50b874be74
mov qword [rsp + 0x68], rdx
movabs rdx, 0x12152402062006
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30f1e0c1f1e0a0a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x5082422171b030f
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x220808082408210f
mov qword [rsp + 0x33], rdx
movabs rdx, 0x181419010c0a1216
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x31a0110191c0412
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x489a58
movzx r9d, byte [rsp + rsi + 0x4b]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x4b], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x4b], dl
add rax, 2
cmp rax, 0x2e
jge 0x489a88
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x489aab
movzx r8d, byte [rsp + rdi + 0x4b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x25
jb 0x489a3b
jmp 0x489a9f
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.0044d280
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00462ca0
mov eax, edi
mov ecx, 0x25
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00489980