joyce8/EMBER2024-capa huggingface dataset:
Function at 0x48b9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ba9d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1365380d44062a3d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7361d11365380d44
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfd4909746e35435c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x512070402000208
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x505010d0b110810
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd100505010d0b11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x404120107030807
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x48ba40
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x48ba6d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x48ba90
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x48ba1f
jmp 0x48ba84
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00463f80
mov eax, edi
mov ecx, 0x13
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0048b9a0

Function at 0x48bac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48bbaa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb241cc7529d2c84c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc563b241cc7529d2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa7cdd843cdd23b75
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30d10050b010e10
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9021109030d1005
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc01110c0f02070d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x48bb4d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x48bb7a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x48bb9d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x48bb30
jmp 0x48bb91
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00463f80
mov eax, edi
mov ecx, 0x12
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0048bac0
Function at 0x48cdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ceda
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x61b83b2ef3422427
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf36944330c43e3ce
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2d3a63aaf3694433
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40783c746e02a84e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf15021b10140d01
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb06030f0f15021b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8190d051409050f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160406060c0b0312
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140c000913121915
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x48ce77
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x24
jge 0x48cea9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x48cecd
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x1c
jb 0x48ce5d
jmp 0x48cec1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.0044e180
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00463f80
mov eax, edi
mov ecx, 0x1c
call fcn.00463f80
nop
call fcn.00461d00
nop
jmp fcn.0048cdc0
Function at 0x48e800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e8cc
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3661d6da3e6f6c9a
mov qword [rsp + 0x19], rdx
movabs rdx, 0xac0c643661d6da3e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30a040707030a00
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3050309
xor eax, eax
jmp 0x48e865
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x48e89c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x48e8bf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
cmp rsi, 0xb
jb 0x48e84b
jmp 0x48e8b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00463f80
mov eax, edi
mov ecx, 0xb
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0048e800

Function at 0x48e8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e9ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6946584c615b6b44
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x505c6946584c615b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x73616e591b703e2e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4050d0a0b0b1008
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9090e05110d0a0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe01020b11000a00
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x48e96d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x48e99a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x48e9bd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x48e950
jmp 0x48e9b1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00463f80
mov eax, edi
mov ecx, 0x12
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0048e8e0
Function at 0x4901a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x490286
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4d7c6b7a69555887
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x796f9a8d6e8c8b4d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9010708090b0c08
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60e00020b040901
mov qword [rsp + 0x30], rdx
movabs rdx, 0x405090e070e0609
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x490220
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x490252
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x490277
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0xf
jb 0x490202
jmp 0x49026b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00463f80
mov eax, edi
mov ecx, 0xf
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004901a0

Function at 0x4906a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x490772
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x52534131641d3b3f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x202638d946745253
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6070d04050c0c0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10b05000a0a0a02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49070c
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x19]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x49073e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x490765
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x19]
cmp rsi, 0xe
jb 0x4906f2
jmp 0x490755
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004906a0
Function at 0x490780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x490866
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x74aca7edbdfa8b46
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa36560d9fa74aca7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0c080102030906
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4060c0c08010203
mov qword [rsp + 0x28], rdx
movabs rdx, 0x105010603060a03
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x490800
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x490832
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x490857
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0xd
jb 0x4907e2
jmp 0x49084b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00463f80
mov eax, edi
mov ecx, 0xd
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00490780

Function at 0x490880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x490952
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x81690f6873121bf9
mov qword [rsp + 0x19], rdx
movabs rdx, 0xff6c696f16fd2481
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe0708050a080102
mov qword [rsp + 0x28], rdx
movabs rdx, 0x500000a0e09050b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4908ec
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x49091e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x490945
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 0xf
jb 0x4908d2
jmp 0x490935
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00463f80
mov eax, edi
mov ecx, 0xf
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00490880
Function at 0x491360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49143d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb71625c2e1f022c8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x29066f2ef61bb716
mov qword [rsp + 0x24], rdx
movabs rdx, 0x200040605070507
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60d090302000406
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0c0a0509020108
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4913e0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x49140d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x491430
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4913c2
jmp 0x491424
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00491360

Function at 0x491dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x491eaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x492c76124574e70d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x313f290607163f49
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30564662613d7261
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90b0a00160e0601
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa09111400060414
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0d0b15070808
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x491e4d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x491e7a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x491e9d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x491e30
jmp 0x491e91
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00491dc0
Function at 0x492b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x492c48
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe4e4e29a46aaf347
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7e989adacc74cdb9
mov qword [rsp + 0x27], rdx
movabs rdx, 0x427e989adacc74cd
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf1656cd641a85dbc
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0e0d0106090415
mov qword [rsp + 0x38], rdx
movabs rdx, 0x141204070e180c0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6120e04140d0205
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf090206110d1308
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x492beb
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x492c18
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x492c3b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x492bce
jmp 0x492c2f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00463f80
mov eax, edi
mov ecx, 0x19
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00492b40

Function at 0x492c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x492d2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x50be6c75bd741747
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa2656d9bc1011161
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0603030c0b0909
mov qword [rsp + 0x18], rdx
movabs rdx, 0x603010c0b0b0f0a
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x492ccf
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x492cfc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x492d1f
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x492cb2
jmp 0x492d13
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00463f80
mov eax, edi
mov ecx, 0x10
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00492c60
Function at 0x493240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493326
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc0bab6173b74e7b5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x80ff6df1b79daac0
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd01050706080903
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4010a0b0d010507
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0a000e0d010900
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4932c0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4932f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x493317
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0xf
jb 0x4932a2
jmp 0x49330b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00463f80
mov eax, edi
mov ecx, 0xf
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00493240

Function at 0x493660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49374c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x38726fa7ab996599
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5038726fa7ab9965
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x572e07f61c307461
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd00070b0e0c00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf040e0b000d0007
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7020d040d030b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4936ea
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x49371c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x49373f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x11
jb 0x4936d0
jmp 0x493733
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00463f80
mov eax, edi
mov ecx, 0x11
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00493660
Function at 0x493e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493f38
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x34ee272354581a44
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x57689be3
movabs rdx, 0x400010709090705
mov qword [rsp + 0x26], rdx
movabs rdx, 0x209040001070909
mov qword [rsp + 0x28], rdx
movabs rdx, 0x609080507000204
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x493ed7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x493f08
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x493f2b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x493eba
jmp 0x493f1f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.00493e60

Function at 0x495620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x495706
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9d7373b804333124
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc85773a3691b349d
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe0e03020b040307
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd010e090d0e0e0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90200040b080409
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4956a0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4956d2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4956f7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0xf
jb 0x495682
jmp 0x4956eb
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00463f80
mov eax, edi
mov ecx, 0xf
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00495620
Function at 0x499d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499dcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x566f644065656c4f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6c68886d4d566f64
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1010b0904000c07
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0608040a060607
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x499d6f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x499d9c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x499dbf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x499d52
jmp 0x499db3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00463f80
mov eax, edi
mov ecx, 0xd
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00499d00

Function at 0x49b2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b3bd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f85f506f3eafb38
mov qword [rsp + 0x18], rdx
movabs rdx, 0x659605f3f67a6f85
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x90c0a0006010208
mov qword [rsp + 0x26], rdx
movabs rdx, 0x505090c0a000601
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9040301040a020b
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x49b360
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x49b38d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x49b3b0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x49b342
jmp 0x49b3a4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0049b2e0

Function at 0x49b7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b89d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6fed8fed73fe6567
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xf593
movabs rdx, 0x802060605080404
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x905
xor eax, eax
jmp 0x49b840
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x49b86d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x49b890
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x49b822
jmp 0x49b884
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00463f80
mov eax, edi
mov ecx, 0xa
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0049b7e0
Function at 0x49b8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b97d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7909fcfee7746fec
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xfd
movabs rdx, 0x804030107010101
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6090500
xor eax, eax
jmp 0x49b920
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x49b94d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x49b970
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x49b903
jmp 0x49b964
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00463f80
mov eax, edi
mov ecx, 0xa
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0049b8c0