joyce8/EMBER2024-capa huggingface dataset:
Function at 0x478b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478c4b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xa584847465ac8489
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6e61
movabs rdx, 0x605010107060002
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 4
xor eax, eax
jmp 0x478be5
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xa
jge 0x478c17
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xa
jae 0x478c3e
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x478bc8
jmp 0x478c32
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00478b80

Function at 0x4797a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479872
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x3be53ba98859fa4
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x676e849e
movabs rdx, 0x409000207040108
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x703060309070409
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47980b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x47983d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x479865
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0xc
jb 0x4797f1
jmp 0x479858
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004797a0

Function at 0x47b480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b53c
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x721764f56c7478b7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x600060406000300
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x47b4d7
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x47b508
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47b52f
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x47b4ba
jmp 0x47b523
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.004418e0
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00453440
mov eax, edi
mov ecx, 8
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.0047b480
Function at 0x47d400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d4dc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb59c5fb3f9faf74f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9b7284cbbc5fb59c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x103090d070a0201
mov qword [rsp + 0x28], rdx
movabs rdx, 0x202010407070b06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47d472
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x47d4a8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x47d4cf
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
nop dword [rax]
cmp rsi, 0xe
jb 0x47d458
jmp 0x47d4c3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453440
mov eax, edi
mov ecx, 0xe
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.0047d400

Function at 0x47d500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d5dc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x834c5f82818d894f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8b856174727f8683
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3090e0801020907
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4040d0d0b0e0209
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47d572
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x47d5a8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47d5cf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1e]
nop dword [rax]
cmp rsi, 0xf
jb 0x47d558
jmp 0x47d5c3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453440
mov eax, edi
mov ecx, 0xf
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.0047d500
Function at 0x47e260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e33c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2c691f610b0e4051
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x344345e6403c2c69
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc01020b0b05050a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3080303070b0d09
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47e2d2
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x47e308
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x47e32f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
nop dword [rax]
cmp rsi, 0xe
jb 0x47e2b8
jmp 0x47e323
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453440
mov eax, edi
mov ecx, 0xe
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.0047e260

Function at 0x47e420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e516
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x656338658e0903ab
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbc656338658e0903
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1a84e96996b60eec
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc020903050b000e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0b030e02010f08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50b0e0a0f100809
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47e4b3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x47e4e2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47e509
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x47e496
nop
jmp 0x47e4fd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453440
mov eax, edi
mov ecx, 0x11
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.0047e420
Function at 0x47ef00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47efcb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xdfe0a0da65156e49
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xf2
movabs rdx, 0x405080705070205
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7050706
xor eax, eax
jmp 0x47ef64
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x47ef97
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x47efbe
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x47ef47
jmp 0x47efb2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453440
mov eax, edi
mov ecx, 9
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0047ef00
Function at 0x485380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485448
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xa061a3f0a4b1ef9a
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x204040403050201
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
jmp 0x4853e0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x485412
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48543b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 9
jb 0x4853c6
jmp 0x48542f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453440
mov eax, edi
mov ecx, 9
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00485380
Function at 0x48dc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ddb2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x25206455f36b654a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe961494225206455
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb1f20af1767764f9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2b6f01c24942b620
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6467f66cf1203127
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa1f230e151d0b18
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71311210003180a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x32123041f041b1b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x23030e001b1f120c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x101902191d101513
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48dd4f
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x28
jge 0x48dd7c
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x48dda5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x24
jb 0x48dd32
jmp 0x48dd97
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x24
call fcn.004418e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x24
nop
call fcn.00453440
mov eax, edi
mov ecx, 0x24
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0048dc80

Function at 0x48f160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f22b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3a3063ff6c444dc6
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x52
movabs rdx, 0x606010201000604
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8020406
xor eax, eax
jmp 0x48f1c4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x48f1f7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x48f21e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x48f1a7
jmp 0x48f212
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453440
mov eax, edi
mov ecx, 9
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0048f160
Function at 0x492920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x492ac7
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0x7f70222a5c1b6f6e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6f7063ed6f41530f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x61442053ed222033
mov qword [rsp + 0x28], rdx
movabs rdx, 0x726fe39564855e73
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1c0a6877356ffe15
mov qword [rsp + 0x38], rdx
movabs rdx, 0x39694050a71e504d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x738e52f961346df6
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc2f301316231204
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20081d3005103034
mov qword [rsp + 0x58], rdx
movabs rdx, 0x32190a2a212b2902
mov qword [rsp + 0x60], rdx
movabs rdx, 0x292b21200d301635
mov qword [rsp + 0x68], rdx
movabs rdx, 0x272d282c31192514
mov qword [rsp + 0x70], rdx
movabs rdx, 0xf230a0a10242631
mov qword [rsp + 0x78], rdx
movabs rdx, 0x19281a2d0e26311c
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2c241a2c0d093108
mov qword [rsp + 0x88], rdx
movabs rdx, 0x2c2f130336072a25
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x492a60
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x48
jge 0x492a8d
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x38
jae 0x492aba
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x38
jb 0x492a43
jmp 0x492aae
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x38
call fcn.004418e0
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x38
call fcn.00453440
mov eax, edi
mov ecx, 0x38
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00492920
Function at 0x4934a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4935c8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xbd742af56c53bd72
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x884911b50dbb0fc0
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6ce2f86ef4208849
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2065aa8be992f869
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140f0a0f19050701
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2090b02050b180e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc190f1318080b0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe11170c191a1308
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10104190d1b0a07
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x493560
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x493592
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4935bb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x1e
jb 0x493543
jmp 0x4935af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00453440
mov eax, edi
mov ecx, 0x1e
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004934a0
Function at 0x495b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x495c5c
sub rsp, 0xb0
mov qword [rsp + 0xa8], rbp
lea rbp, [rsp + 0xa8]
movabs rdx, 0x7da463850a435eeb
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4f2d8274669858dd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4756cd8e3ed4f2d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x78d5fe6e69b6382e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6920d6647f6ef3b1
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6ecc64e6287fe873
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x70616868dc6974c6
mov qword [rsp + 0x46], rdx
movabs rdx, 0x72e974acd1292771
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x28273109022c060c
mov qword [rsp + 0x56], rdx
lea rdi, [rsp + 0x58]
lea rsi, [0x00570952]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00453a5a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x495bf4
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x52
jge 0x495c22
movzx edx, byte [rsp + rax + 0x56]
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3e
jae 0x495c4f
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x3e
jb 0x495bd7
nop
jmp 0x495c43
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x3e
call fcn.004418e0
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov eax, esi
mov ecx, 0x3e
call fcn.00453440
mov eax, edi
mov ecx, 0x3e
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.00495b00

Function at 0x496620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x496772
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xf17251eb4970d94d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd3dbfadcf478650e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x20d3dbfadcf47865
mov qword [rsp + 0x26], rdx
movabs rdx, 0x786520efcdcf8dcd
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xcb64530de6e4fe4c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x85a374617265b169
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x81e101e1227140e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x110f19271101120c
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x727110f19271101
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b1c1311281d0f10
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e2213051e0c1a04
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb1e13201d1d150d
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x49670d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2a
jge 0x49673a
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x496765
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x29
jb 0x4966f0
jmp 0x496755
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x29
call fcn.004418e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x29
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0x29
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00496620
Function at 0x498940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498a88
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x1d5ef3630e6c5d68
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x681d5ef3630e6c5d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3f69226142723e3d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20f575575478656b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x65596d7276515b08
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1f05100807021d1c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x31a07090117090c
mov qword [rsp + 0x44], rdx
movabs rdx, 0x214111c031a0709
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0004041b1a1e17
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f081506060a080e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7190e011f1a0e0c
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x498a20
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x16]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x498a52
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x498a7b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x16]
cmp rsi, 0x21
jb 0x498a02
jmp 0x498a6f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00453440
mov eax, edi
mov ecx, 0x21
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.00498940
Function at 0x49c240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x49c3d5
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0x2e745d787eb5715e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9f6780651c6c768d
mov qword [rsp + 0x25], rdx
movabs rdx, 0x201a6f202d7d749f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5fb77074646a7275
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa1627c6f7e626177
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb61772ab78528847
mov qword [rsp + 0x44], rdx
movabs rdx, 0x152a2811051e1200
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xb180b0e152a2811
mov qword [rsp + 0x50], rdx
movabs rdx, 0x9222414292b2a1c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2b02000405282927
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f030d230b1c1902
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2e0b18092d291801
mov qword [rsp + 0x70], rdx
movabs rdx, 0xb1b2e0b1b1c2601
mov qword [rsp + 0x78], rdx
movabs rdx, 0x12010f2e011b2e2b
mov qword [rsp + 0x80], rdx
movabs rdx, 0x11081d00240d1d27
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x49c36e
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x44
jge 0x49c39b
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x49c3c8
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x2f
jb 0x49c351
jmp 0x49c3bc
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2f
call fcn.004418e0
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00453440
mov eax, edi
mov ecx, 0x2f
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0049c240

Function at 0x49c3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c4e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2e41ed326ced653c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3f61562e41ed326c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x73053c25d73c65e8
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7000d11070e0510
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x100f050a00050f02
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf04100f050a0005
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa020f0710060b0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49c480
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x49c4b2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49c4db
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0x13
jb 0x49c465
jmp 0x49c4cf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453440
mov eax, edi
mov ecx, 0x13
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0049c3e0