joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4766a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476786
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74107ada868120b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6338270162066870
mov qword [rsp + 0x38], rdx
movabs rdx, 0x401070e00030c05
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd070401070e0003
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0a010d070701
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x476720
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x476752
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x476777
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 0x10
jb 0x476702
jmp 0x47676b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00440b20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451260
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.004766a0

Function at 0x476dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476e87
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x61e9020565683f44
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x4c35
movabs rdx, 0x409010105080606
mov qword [rsp + 0x18], rdx
movabs rdx, 0x900080606060409
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x476e27
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x476e57
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x476e7a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x476e0a
jmp 0x476e6e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00440b20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451260
mov eax, edi
mov ecx, 0xa
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.00476dc0
Function at 0x478120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47822c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6a641b15705c721f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x27612b3c6f3a2424
mov qword [rsp + 0x44], rdx
movabs rdx, 0x52312f1827612b3c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3341614d1c6e0469
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7070d0a020c070f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x101308051a02170a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x415071b0d090008
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x515041211080d13
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4781c8
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x20
jge 0x4781fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x47821f
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 0x1c
jb 0x4781ae
jmp 0x478213
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00440b20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451260
mov eax, edi
mov ecx, 0x1c
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.00478120

Function at 0x4785e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4786ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf16f4482ea1c8453
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xfa8efcf1
movabs rdx, 0xa0a0801090a0209
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x308020703040a0a
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x478645
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x47867c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x47869f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0xb
jb 0x47862b
jmp 0x478693
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00440b20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451260
mov eax, edi
mov ecx, 0xb
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.004785e0
Function at 0x47f700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f7e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5797da958676f192
mov qword [rsp + 0x31], rdx
movabs rdx, 0xc898fa64d5867057
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1040c0e040a050e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x707000e01040c0e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x3090506000d040d
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x47f780
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x47f7b2
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47f7d7
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
cmp rsi, 0xf
jb 0x47f762
jmp 0x47f7cb
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00440b20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451260
mov eax, edi
mov ecx, 0xf
nop
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.0047f700

Function at 0x489dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489eaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x796c61cdfa4b6c69
mov qword [rsp + 0x35], rdx
movabs rdx, 0xe66e69796c61cdfa
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6edcd0746361d41c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1110110402110a0c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10030d100b111110
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb11100b110c0711
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x489e4d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x489e7a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x489e9d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x489e30
jmp 0x489e91
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00440b20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451260
mov eax, edi
mov ecx, 0x13
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.00489dc0
Function at 0x48ad60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ae58
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8a7285e372653677
mov qword [rsp + 0x33], rdx
movabs rdx, 0xb370776e698a7285
mov qword [rsp + 0x38], rdx
movabs rdx, 0x68396ca56e679593
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60a01130413070e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5010b0b07000c01
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa1405010b0b0700
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa0e0d110c0a0500
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x48adf6
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
mov byte [rsp + rdi + 0x33], r9b
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x1a
jge 0x48ae28
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x48ae4b
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x15
jb 0x48addf
jmp 0x48ae3f
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00440b20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451260
mov eax, edi
mov ecx, 0x15
call fcn.00451260
nop
call fcn.0044efe0
nop dword [rax]
jmp fcn.0048ad60

Function at 0x48b2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b387
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6cb3bc6d802dd019
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x7f63256c
movabs rdx, 0x502000806060a00
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5030801000a0502
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x48b328
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x48b357
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x48b37a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x48b30b
jmp 0x48b36e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00440b20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451260
mov eax, edi
mov ecx, 0xb
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.0048b2c0
Function at 0x48b3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b48a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3c012e369633848d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2e353c012e369633
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3a2339af92e59
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10f01010f100701
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30a010f01010f10
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0d0d0603000c03
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x48b42d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x48b45a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x48b47d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x48b410
jmp 0x48b471
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00440b20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451260
mov eax, edi
mov ecx, 0x12
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.0048b3a0

Function at 0x48dbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48dcdb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x76c69026c454b3f
mov qword [rsp + 0x35], rdx
movabs rdx, 0x655344076c69026c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x486f481c692a4647
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90d0c0800100f03
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8020d0710090d01
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc08040c08020d07
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1000040b100d1202
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x48dc79
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1c
jge 0x48dcab
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x48dcce
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0x13
jb 0x48dc5f
jmp 0x48dcc2
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00440b20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451260
mov eax, edi
mov ecx, 0x13
call fcn.00451260
nop
nop dword [rax + rax]
call fcn.0044efe0
jmp fcn.0048dbe0
Function at 0x48e7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e88a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74816f668aa98979
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6c38762074816f66
mov qword [rsp + 0x38], rdx
movabs rdx, 0x74b19e721b9a6b73
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc020c12060c0f0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x209000e030c0f01
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa03090c1103000f
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x48e82d
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x18
jge 0x48e85a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x48e87d
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x48e810
jmp 0x48e871
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00440b20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451260
mov eax, edi
mov ecx, 0x14
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.0048e7a0

Function at 0x48f6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f7cc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6369060313ca6fb3
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xacb4206e55f19e42
mov qword [rsp + 0x45], rdx
movabs rdx, 0xb16fa9acb4206e55
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb56e0b737ab06fb2
mov qword [rsp + 0x50], rdx
movabs rdx, 0x203050a08041a0e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x915151816041816
mov qword [rsp + 0x27], rdx
movabs rdx, 0x160b02120915
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xa0f131508051009
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x48f768
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x48f79c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x48f7bf
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0x1b
jb 0x48f74e
jmp 0x48f7b3
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.00440b20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00451260
mov eax, edi
mov ecx, 0x1b
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.0048f6c0
Function at 0x493fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4940bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xefad5216bec1656b
mov qword [rsp + 0x31], rdx
movabs rdx, 0xe665726967bf65ef
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0a0e050e0e070a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0206060e0a0e05
mov qword [rsp + 0x21], rdx
movabs rdx, 0x90a040a040a0306
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x494060
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x3a]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x3a]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x49408d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4940b0
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x494042
jmp 0x4940a4
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00440b20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451260
mov eax, edi
mov ecx, 0xf
call fcn.00451260
nop
nop dword [rax]
call fcn.0044efe0
jmp fcn.00493fe0

Function at 0x495c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x495d1d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4b11206c63483b54
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x745b3e56f94b1120
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa08070907010606
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa070a0807090701
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30b030201080000
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x495cc0
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x495ced
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x495d10
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x495ca2
jmp 0x495d04
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00440b20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451260
mov eax, edi
mov ecx, 0xd
call fcn.00451260
nop
nop dword [rax]
call fcn.0044efe0
jmp fcn.00495c40
Function at 0x498b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498c3b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x633aed6d20e7fd6a
mov qword [rsp + 0x35], rdx
movabs rdx, 0x58e757633aed6d20
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40656cef60206e75
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10b0e0901000a05
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf07060807051202
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf090f0706080705
mov qword [rsp + 0x25], rdx
movabs rdx, 0x508050105060206
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x498bd9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x498c0b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x498c2e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0x13
jb 0x498bbf
jmp 0x498c22
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00440b20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451260
mov eax, edi
mov ecx, 0x13
call fcn.00451260
nop
nop dword [rax + rax]
call fcn.0044efe0
jmp fcn.00498b40

Function at 0x499de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499f27
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xdbed726f77a2d8e3
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x6fed06dbed726f77
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6e6f403d58c474ea
mov qword [rsp + 0x58], rdx
movabs rdx, 0xcc6edaf53263436e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x121373beae929c62
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe080d0b1f10220c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf060e080d0b1f10
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x916160e1a1e141f
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1a091d0f081b090e
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x211b090001060c1a
mov qword [rsp + 0x35], rdx
movabs rdx, 0x81708141f180d07
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x21c1c0221222201
mov qword [rsp + 0x45], rdx
xor eax, eax
jmp 0x499ec7
movzx r9d, byte [rsp + rsi + 0x4d]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x4d], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x4d], dl
add rax, 2
cmp rax, 0x32
jge 0x499ef7
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x23
jae 0x499f1a
movzx r8d, byte [rsp + rdi + 0x4d]
sub r8d, edx
cmp rsi, 0x23
jb 0x499eaa
jmp 0x499f0e
xor eax, eax
lea rbx, [rsp + 0x4d]
mov ecx, 0x23
call fcn.00440b20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00451260
mov eax, edi
mov ecx, 0x23
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.00499de0
Function at 0x49b900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b9d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfd69ccd06d206f36
mov qword [rsp + 0x29], rdx
movabs rdx, 0x3d6e753dcc20fffd
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe080804040a0504
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa0404050b00070b
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x49b96c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x49b99e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49b9c5
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0xf
jb 0x49b952
jmp 0x49b9b5
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00440b20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00451260
mov eax, edi
mov ecx, 0xf
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.0049b900

Function at 0x49c0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c1fd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x7965e069506361d7
mov qword [rsp + 0x43], rdx
movabs rdx, 0x6fbfe381ea74f337
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xf3c9a56f6e6fbfe3
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6b7277d256386e4a
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc0712131a050e08
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x180d15030c071213
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc1919130d050a11
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xe0d150d0b140515
mov qword [rsp + 0x33], rdx
movabs rdx, 0x9110917190a0003
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x49c1a0
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x49c1cd
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x49c1f0
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x49c17d
jmp 0x49c1e4
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00440b20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451260
mov eax, edi
mov ecx, 0x1d
call fcn.00451260
nop
nop dword [rax]
call fcn.0044efe0
jmp fcn.0049c0e0
Function at 0x49fae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49fbfd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xf0dd99e6b1746f19
mov qword [rsp + 0x45], rdx
movabs rdx, 0x656dee2fab5806a5
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x6a20ad656dee2fab
mov qword [rsp + 0x50], rdx
movabs rdx, 0x272c696620eb491c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x31406070b100012
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd091a0015050014
mov qword [rsp + 0x25], rdx
movabs rdx, 0x10050b151408141a
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xc15141914030810
mov qword [rsp + 0x35], rdx
movabs rdx, 0x5130b0419050813
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x49fba0
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x49fbcd
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x49fbf0
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
cmp rsi, 0x1b
jb 0x49fb7d
jmp 0x49fbe4
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x1b
call fcn.00440b20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00451260
mov eax, edi
mov ecx, 0x1b
call fcn.00451260
nop
nop dword [rax]
call fcn.0044efe0
jmp fcn.0049fae0

Function at 0x49ff00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49ffea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f6a6e617269796f
mov qword [rsp + 0x31], rdx
movabs rdx, 0x567c746f6082596f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x688a75646870701f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd05140d0e0e0612
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd010a0e16120a02
mov qword [rsp + 0x21], rdx
movabs rdx, 0x150915080f0d1613
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x49ff8d
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
cmp rax, 0x18
jge 0x49ffba
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x49ffdd
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0x17
jb 0x49ff70
jmp 0x49ffd1
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.00440b20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451260
mov eax, edi
mov ecx, 0x17
call fcn.00451260
nop
call fcn.0044efe0
jmp fcn.0049ff00