joyce8/EMBER2024-capa huggingface dataset:
Function at 0x478a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478b66
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x36fadeb0a930f531
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa4f231f4ec0736fa
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6060d08030a0408
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa0c06060d08030a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x509090801010408
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x478b00
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x478b32
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x478b57
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0xe
jb 0x478ae2
jmp 0x478b4b
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00478a80

Function at 0x4793e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4794cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x38e93908817fdc31
mov qword [rsp + 0x37], rdx
movabs rdx, 0x8738e93908817fdc
mov qword [rsp + 0x38], rdx
movabs rdx, 0x803282bcd19f04fc
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0d0b090d100a0b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe030b04080c0806
mov qword [rsp + 0x27], rdx
movabs rdx, 0x20408100401100b
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x47946a
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x47949c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4794bf
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0x11
jb 0x479450
jmp 0x4794b3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0046d060
mov eax, edi
mov ecx, 0x11
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004793e0
Function at 0x4795e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4796cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcfc0dc328638c732
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xcd81cfc0dc328638
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5f7a8cb2be397e37
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd03060103070f09
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb08050f030e0d03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x106101011030f11
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x47966a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5a]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x16
jge 0x47969c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4796bf
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5a]
cmp rsi, 0x12
jb 0x479650
jmp 0x4796b3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004795e0

Function at 0x47aa40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ab5a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xfc9c398d1cfddd99
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xfaa0fdf7333864c8
mov qword [rsp + 0x46], rdx
movabs rdx, 0x3831faa0fdf73338
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9e32ff75e09cf8f5
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf0717140c190903
mov qword [rsp + 0x18], rdx
movabs rdx, 0x12030d090e020f07
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60603130e00150f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf04090717190301
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x316141219161608
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x47aaf7
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x26
jge 0x47ab29
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x47ab4d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x1a
jb 0x47aadd
jmp 0x47ab41
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00467060
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0046d060
mov eax, edi
mov ecx, 0x1a
call fcn.0046d060
nop
call fcn.0046ad80
nop
jmp fcn.0047aa40
Function at 0x47b260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b37a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x22e0eb99cc31d731
mov qword [rsp + 0x44], rdx
movabs rdx, 0x7035c8dbaa3533c7
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x8a3548c27035c8db
mov qword [rsp + 0x50], rdx
movabs rdx, 0x41e3cffbd9f53033
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b180f0b11071008
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc10081a0b081b18
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1613041616170b17
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf060c1811050705
mov qword [rsp + 0x34], rdx
movabs rdx, 0x190d1805010c1603
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x47b317
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x26
jge 0x47b349
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x47b36d
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0x1c
jb 0x47b2fd
jmp 0x47b361
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.00467060
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0046d060
mov eax, edi
mov ecx, 0x1c
call fcn.0046d060
nop
call fcn.0046ad80
nop
jmp fcn.0047b260
Function at 0x489c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489da7
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x46cc01013dd72972
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x2f65ee6946cc0101
mov qword [rsp + 0x50], rdx
movabs rdx, 0x65826cd241202ffd
mov qword [rsp + 0x58], rdx
movabs rdx, 0xebf7eeb9695b004b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6a31203e2006ec3b
mov qword [rsp + 0x68], rdx
movabs rdx, 0xb090d0c0d100618
mov qword [rsp + 0x18], rdx
movabs rdx, 0x51812120b090d0c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf050f020b190605
mov qword [rsp + 0x24], rdx
movabs rdx, 0x151d12181c041e1b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30b012318150514
mov qword [rsp + 0x34], rdx
movabs rdx, 0x18061a1a16041b1d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x121b0d1c060d1e0c
mov qword [rsp + 0x44], rdx
xor eax, eax
jmp 0x489d47
movzx r9d, byte [rsp + rsi + 0x4c]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x4c], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x4c], dl
add rax, 2
cmp rax, 0x34
jge 0x489d77
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x489d9a
movzx r8d, byte [rsp + rdi + 0x4c]
sub r8d, edx
cmp rsi, 0x24
jb 0x489d2a
jmp 0x489d8e
xor eax, eax
lea rbx, [rsp + 0x4c]
mov ecx, 0x24
call fcn.00467060
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.0046d060
mov eax, edi
mov ecx, 0x24
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00489c60

Function at 0x48ff60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49007a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x2559d03aa5345bf0
mov qword [rsp + 0x42], rdx
movabs rdx, 0x43da7369734d6f29
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x74201304472a43da
mov qword [rsp + 0x50], rdx
movabs rdx, 0x580b4e743b546565
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1417010211010018
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1818070314170102
mov qword [rsp + 0x22], rdx
movabs rdx, 0x190506120719060e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa011319170f1c1d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10061d081303191b
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x490017
movzx r9d, byte [rsp + rsi + 0x42]
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rdi + 0x42], dl
mov byte [rsp + rsi + 0x42], r8b
add rax, 2
cmp rax, 0x24
jge 0x490049
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x49006d
movzx r8d, byte [rsp + rdi + 0x42]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
cmp rsi, 0x1e
jb 0x48fffd
jmp 0x490061
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.00467060
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0046d060
mov eax, edi
mov ecx, 0x1e
call fcn.0046d060
nop
call fcn.0046ad80
nop
jmp fcn.0048ff60
Function at 0x4906e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x490798
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6e62216e5a464d41
mov qword [rsp + 0x28], rdx
movabs rdx, 0x601030605030602
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x103
xor eax, eax
jmp 0x490735
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x490768
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x49078b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
nop
cmp rsi, 8
jb 0x49071b
jmp 0x49077f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046d060
mov eax, edi
mov ecx, 8
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.004906e0

Function at 0x491c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x491cf8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd5d36c6c657279ca
mov qword [rsp + 0x28], rdx
movabs rdx, 0x707030603060007
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x300
xor eax, eax
jmp 0x491c98
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x53]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x53]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x491cc8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x491ceb
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x491c7b
jmp 0x491cdf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046d060
mov eax, edi
mov ecx, 8
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.00491c40

Function at 0x492700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4927bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8a696c74667d6747
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x9483
movabs rdx, 0x201070801030709
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x1080409
xor eax, eax
jmp 0x492760
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x49278d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4927b0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x492743
jmp 0x4927a4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0046d060
mov eax, edi
mov ecx, 0xa
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00492700
Function at 0x492b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x492bfd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf95f1b07866efc85
mov qword [rsp + 0x31], rdx
movabs rdx, 0x12796728d6156ff9
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe09000a0e000905
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb040a010e09000a
mov qword [rsp + 0x21], rdx
movabs rdx, 0x70e04070705030e
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x492ba0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x492bcd
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x492bf0
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x492b82
jmp 0x492be4
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0046d060
mov eax, edi
mov ecx, 0xf
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00492b20

Function at 0x496580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49667d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xccfa65e176e379f3
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6ffbecd8e3c3ccfa
mov qword [rsp + 0x40], rdx
movabs rdx, 0x61faf20505de78cc
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7090d0f03100d08
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0b101504020e00
mov qword [rsp + 0x26], rdx
movabs rdx, 0x140608130a0b1015
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf11100c0d121510
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x496620
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x49664d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x496670
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4965ff
jmp 0x496664
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0046d060
mov eax, edi
mov ecx, 0x16
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00496580
Function at 0x497720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4977ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x73088b50989ecb86
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xa1618b73
movabs rdx, 0x201000003030a06
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8050802020a0201
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x497785
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4977bc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4977df
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0xb
jb 0x49776b
jmp 0x4977d3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00497720

Function at 0x497800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4978c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xbc23215389646c23
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xcb1c89bc
movabs rdx, 0x5030505080a06
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6090306070005
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x497868
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x497897
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4978ba
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x49784b
jmp 0x4978ae
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00497800

Function at 0x498240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498306
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5f293243b67515df
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x753c355f
movabs rdx, 0x905000603080901
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x6080806
xor eax, eax
jmp 0x4982a0
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1d]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4982d2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4982f7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1d]
cmp rsi, 0xb
jb 0x498284
jmp 0x4982eb
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00498240
Function at 0x498780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49884c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8f36bd2b6cde73d7
mov qword [rsp + 0x29], rdx
movabs rdx, 0x69d5e25268d0508f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb090404050b0705
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc00050d060c0204
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x4987ef
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x49881c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x49883f
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x4987d2
jmp 0x498833
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0046d060
mov eax, edi
mov ecx, 0xf
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00498780

Function at 0x499860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499927
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7d6082a084b07987
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x699190bb
movabs rdx, 0x607050208070904
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa05040603000903
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4998c8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4998f7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x49991a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4998ab
jmp 0x49990e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0046d060
mov eax, edi
mov ecx, 0xc
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00499860
Function at 0x49c420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c50c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc8a99fd5d8ae8b49
mov qword [rsp + 0x34], rdx
movabs rdx, 0x70797289c8a99fd5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x72f394b1909d704f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x711030408100612
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x12080b0111050306
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0e110304050205
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x49c4aa
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x49c4dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x49c4ff
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x14
jb 0x49c490
jmp 0x49c4f3
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046d060
mov eax, edi
mov ecx, 0x14
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0049c420

Function at 0x49d580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d6b8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x59735862736574a0
mov qword [rsp + 0x46], rdx
movabs rdx, 0x6863597358627365
mov qword [rsp + 0x48], rdx
movabs rdx, 0x589767495f68725c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6f43646165607172
mov qword [rsp + 0x58], rdx
movabs rdx, 0x746e4c898c689580
mov qword [rsp + 0x60], rdx
movabs rdx, 0x30900030c1d1b1e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb1b021f071c1010
mov qword [rsp + 0x24], rdx
movabs rdx, 0x131a0b1b021f071c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb14161006050816
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x710171a150a131f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x41303110403021c
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x49d655
movzx r9d, byte [rsp + rsi + 0x46]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x46], dl
mov byte [rsp + rsi + 0x46], r8b
add rax, 2
cmp rax, 0x2a
jge 0x49d688
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x49d6ab
movzx r8d, byte [rsp + rdi + 0x46]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
nop
cmp rsi, 0x22
jb 0x49d63b
jmp 0x49d69f
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.00467060
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.0046d060
mov eax, edi
mov ecx, 0x22
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.0049d580