joyce8/EMBER2024-capa huggingface dataset:
Function at 0x499220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499316
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2e492f096c354e00
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x452e492f096c354e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x326e5dc53d136c48
mov qword [rsp + 0x26], rdx
movabs rdx, 0x100e0504060b000d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x900100e0504060b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20806010c050906
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4992b3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4992e2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x499309
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x499296
nop
jmp 0x4992fd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453440
mov eax, edi
mov ecx, 0x11
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.00499220
Function at 0x499940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499a92
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x682632ee46683f1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2200682632ee466
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e69d483d7836d74
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4a9575bb20671c07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe4287514722066fc
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf1906190f0d130c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb030f1906190f0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f01011f12201f19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18060f0e120c1204
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160f071f19140e18
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e09000403130719
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc06121a060e1921
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x499a2d
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x32
jge 0x499a5a
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x499a85
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x22
jb 0x499a10
jmp 0x499a75
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x22
call fcn.004418e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x22
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0x22
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00499940

Function at 0x49a320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a416
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9d8bb5ec6c7c6597
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6c61c79d8bb5ec6c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa034b369ee9d7ec2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x12081211040d070c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80012070e071208
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb060d020e061005
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49a3b3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x49a3e2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49a409
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x49a396
nop
jmp 0x49a3fd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453440
mov eax, edi
mov ecx, 0x13
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.0049a320
Function at 0x49a440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a586
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x4c7439f83b66ec1a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x154c7439f83b66ec
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4692043f4436922
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20e5376fd47814a4
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x65674f104b4066f8
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc1b011617141911
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb11141d12100719
mov qword [rsp + 0x46], rdx
movabs rdx, 0x5120b11141d1210
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160714170900030d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x12000b2004140b10
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d1d1d161c1e0814
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x49a520
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x49a54d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x49a574
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x21
jb 0x49a502
jmp 0x49a568
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.004418e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00453440
mov eax, edi
mov ecx, 0x21
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0049a440

Function at 0x49a5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a6b6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xa5bfda1b106d51a5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6c0eaf728c6ea19c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2074658f6c0eaf72
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb11901aafc137626
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7000405081a1b0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100e0e0e010e1116
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7180309090d170e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x16061a0d160b1900
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x49a64e
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x20
jge 0x49a682
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x49a6a9
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0x1c
jb 0x49a634
nop
jmp 0x49a69d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453440
mov eax, edi
mov ecx, 0x1c
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.0049a5a0
Function at 0x49a6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x49a8b2
sub rsp, 0xb0
mov qword [rsp + 0xa8], rbp
lea rbp, [rsp + 0xa8]
movabs rdx, 0x5c0c33655066dae7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd569522624287033
mov qword [rsp + 0x27], rdx
movabs rdx, 0x95611d569522624
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3e654b4530c4176c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x16d7e5661442e77e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x68ff45693230766e
mov qword [rsp + 0x42], rdx
movabs rdx, 0x706d4f0f73197404
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x727b2b4769555c20
mov qword [rsp + 0x52], rdx
movabs rdx, 0x1d2e293908201001
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x2b2d0c1d21290f16
mov qword [rsp + 0x62], rdx
movabs rdx, 0x161c2505150b2b2d
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc00293921222d0b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x340e31032f2d1a35
mov qword [rsp + 0x78], rdx
movabs rdx, 0x152b06211e142d0a
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2f091409251f2b35
mov qword [rsp + 0x88], rdx
movabs rdx, 0x282d261b3038180d
mov qword [rsp + 0x90], rdx
movabs rdx, 0x290c1e1237301429
mov qword [rsp + 0x98], rdx
movabs rdx, 0x2a030a1c07002a0b
mov qword [rsp + 0xa0], rdx
xor eax, eax
jmp 0x49a844
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x4e
jge 0x49a877
movzx edx, byte [rsp + rax + 0x5a]
movzx esi, byte [rsp + rax + 0x5b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x3b
jae 0x49a8a5
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x3b
jb 0x49a827
jmp 0x49a898
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x3b
call fcn.004418e0
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov eax, esi
mov ecx, 0x3b
nop
call fcn.00453440
mov eax, edi
mov ecx, 0x3b
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0049a6e0
Function at 0x49cbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cca8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xcb1e7b2123d06fcf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xba6ed584bf732029
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0d030c08060502
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4020c0d030c0806
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20b070600080f04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x49cc41
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x12
jge 0x49cc73
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x49cc9b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0x10
jb 0x49cc27
jmp 0x49cc8f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453440
mov eax, edi
mov ecx, 0x10
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0049cbc0

Function at 0x49f020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f0fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8e89a8c344979f91
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd974978e89a8c344
mov qword [rsp + 0x22], rdx
movabs rdx, 0x503010706080104
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2000203030a0503
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49f092
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x49f0c8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x49f0ef
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
nop dword [rax]
cmp rsi, 0xb
jb 0x49f078
jmp 0x49f0e3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.0049f020
Function at 0x49fb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49fc28
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x3169205c466538be
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3a2a0efb3169205c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65bd6e652f1f5664
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10b120807000012
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x120101070b0f040e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x90b120101070b0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb120a0003010d08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49fbc0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x49fbf2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x49fc1b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0x14
jb 0x49fba5
jmp 0x49fc0f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453440
mov eax, edi
mov ecx, 0x14
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0049fb20

Function at 0x4a0580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a066b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x1cdd25d061306eee
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x74bc8d1e75c02629
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60e0c000d0a0a0e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x704060e0c000d0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0205080e090a05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a0604
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4a0637
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4a065e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4a05e7
jmp 0x4a0652
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453440
mov eax, edi
mov ecx, 0x10
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004a0580
Function at 0x4a5160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5256
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3b4c453c53513507
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4d3b4c453c535135
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x635b694e2a22203a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9040b090c070005
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10090d0807050904
mov qword [rsp + 0x30], rdx
movabs rdx, 0x607030f0106020c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a51f3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x4a5222
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a5249
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x4a51d6
nop
jmp 0x4a523d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453440
mov eax, edi
mov ecx, 0x11
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004a5160

Function at 0x4a5280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5388
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x4e46571045543882
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64ef652736614e46
mov qword [rsp + 0x22], rdx
movabs rdx, 0x657348728d694882
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a130a0c0f0601
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4020f07050a0a03
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf0305060c0402
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa020e110f130212
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a5322
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1e
jge 0x4a534f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a537b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a5305
jmp 0x4a536f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00453440
mov eax, edi
mov ecx, 0x16
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004a5280
Function at 0x4a7480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7596
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x4d64693e0cde6e69
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4214735a4aab4834
mov qword [rsp + 0x26], rdx
movabs rdx, 0x53b4214735a4aab
mov qword [rsp + 0x28], rdx
movabs rdx, 0xffd874fee1723400
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0b100a03071013
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8160f1908110918
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90e09120f150212
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9020f1004081213
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a752e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a7562
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a7589
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 0x1a
jb 0x4a7514
nop
jmp 0x4a757d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00453440
mov eax, edi
mov ecx, 0x1a
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004a7480

Function at 0x4a9980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9a92
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x93d72756f564d3a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x666f483a61655720
mov qword [rsp + 0x25], rdx
movabs rdx, 0x5b666f483a616557
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2b635b696f766145
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x618010d0c060711
mov qword [rsp + 0x36], rdx
movabs rdx, 0x61600060d17100c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x700061600060d17
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170210060902100f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a9a31
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x4a9a5e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4a9a85
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4a9a14
jmp 0x4a9a79
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00453440
mov eax, edi
mov ecx, 0x19
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004a9980
Function at 0x4adee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adfd6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x65a99c55b0b7a4cb
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd365a99c55b0b7a4
mov qword [rsp + 0x20], rdx
movabs rdx, 0xbdc3dbda20b1bac6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90900080a0f0b09
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b0d100d0e080f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30504020e0106
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4adf73
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4adfa2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4adfc9
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4adf56
nop
jmp 0x4adfbd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453440
mov eax, edi
mov ecx, 0x11
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004adee0

Function at 0x4b0a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0af6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x72a589afe365f465
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6d72a589afe365f4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb36fe8c5fff27461
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10b100d0b030e0c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6050d0b010b100d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10e0c0304010406
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b0a93
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4b0ac2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b0ae9
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b0a76
nop
jmp 0x4b0add
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453440
mov eax, edi
mov ecx, 0x11
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004b0a00
Function at 0x4b0b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0c46
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe52a72e148136572
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1540d8ebfb174420
mov qword [rsp + 0x24], rdx
movabs rdx, 0x61201540d8ebfb17
mov qword [rsp + 0x26], rdx
movabs rdx, 0x281e4cc26cbf4076
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb040d1314190416
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2130b040d131419
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70616161906070c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30f0217190b0a18
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3130e090a181304
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b0be0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x22
jge 0x4b0c0d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4b0c34
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4b0bc3
jmp 0x4b0c28
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00453440
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b0b20

Function at 0x4b0f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1028
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb3d68e98a17e699f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e96d945bcb3d68e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6465feb1b0c4ccac
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50b000e0805050a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40f071008090d12
mov qword [rsp + 0x36], rdx
movabs rdx, 0x602040f07100809
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30002110604120d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b0fc2
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x4b0fef
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b101b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4b0fa5
jmp 0x4b100f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453440
mov eax, edi
mov ecx, 0x15
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b0f20