joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47e360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e458
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x69e66eaa65f49c46
mov qword [rsp + 0x19], rdx
movabs rdx, 0x746e4f6da9a68669
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa773be8269a36bd4
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc061611040c0404
mov qword [rsp + 0x30], rdx
movabs rdx, 0x101602130f0f0a14
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60a0808100f130c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1309141411010c10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x47e3f6
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
mov byte [rsp + rdi + 0x19], r9b
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x47e428
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x47e44b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x17
jb 0x47e3df
jmp 0x47e43f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.0047e360

Function at 0x47e5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e6c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x61e66c330336dd3a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x572a32f44c356e61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3000b0c05000201
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0903000b0c0500
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40d020004060302
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x47e660
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x47e692
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47e6b7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
cmp rsi, 0xf
jb 0x47e642
jmp 0x47e6ab
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0047e5e0
Function at 0x47eda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ee9b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x53c66375f8f8dc47
mov qword [rsp + 0x19], rdx
movabs rdx, 0x50ece653c66375f8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xfdefd8f2dd35ec6b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10120c0711060102
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe10020502100b03
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf09120c0e100205
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2080f030d0c0f0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47ee39
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x47ee6b
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x47ee8e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
cmp rsi, 0x13
jb 0x47ee1f
jmp 0x47ee82
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.0047eda0

Function at 0x481840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4818fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5d45466c6163bdd2
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x17
movabs rdx, 0x800070808010706
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6080606
xor eax, eax
nop
jmp 0x4818a0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4818cd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4818f0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x481882
jmp 0x4818e4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00454ec0
mov eax, edi
mov ecx, 9
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.00481840
Function at 0x481a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481ad2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x63d82ee5486516f3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x73731563d82ee548
mov qword [rsp + 0x20], rdx
movabs rdx, 0x806080406050500
mov qword [rsp + 0x28], rdx
movabs rdx, 0x606060103040503
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x481a6c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x481a9e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x481ac5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
cmp rsi, 0xb
jb 0x481a52
jmp 0x481ab5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00481a00

Function at 0x481ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481be8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3165575155667a50
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x655a685369636175
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6d7f655a68536963
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7361566974886560
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90502120903070a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x111812170c0e0810
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21712130b0d1601
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0117160e080114
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x481b8b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x481bb8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x481bdb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x481b6e
jmp 0x481bcf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00481ae0
Function at 0x481c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481ce6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x33e273fd6317b166
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57837865708b33e2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x600090209010902
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc08060206000902
mov qword [rsp + 0x30], rdx
movabs rdx, 0x808020801040c06
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x481c80
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x481cb2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x481cd7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 0xe
jb 0x481c62
jmp 0x481ccb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00454ec0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00481c00

Function at 0x484e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484ed2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x47b6adf955f5f14e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xabac7749b66547b6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40b020b0c050d01
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60d02060202090b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x484e6c
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x484e9e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x484ec5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0xe
jb 0x484e52
jmp 0x484eb5
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xe
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00484e00
Function at 0x484ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484fdd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x90987465846c9996
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa06d8ebaa8d49098
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb69bb5cb8aa89e6e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8130f060715030b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x80a0c0600121000
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x8110914080a0c06
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30f000f07010d13
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x484f80
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x484fad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x484fd0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x484f5f
jmp 0x484fc4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.00484ee0

Function at 0x486ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486d6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6d61736d7274676e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x796a6f6e6b6d6173
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7080607000b0603
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1010c040a000c08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x486d0f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x486d3c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x486d5f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x486cf2
jmp 0x486d53
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00454ec0
mov eax, edi
mov ecx, 0xd
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00486ca0
Function at 0x493d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493e46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xadc584c944b98bcf
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc122d5beb73cbcad
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10c020901090c05
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4020d02010c0209
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80107000e0a0b06
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x493de0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x493e12
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x493e37
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
cmp rsi, 0xf
jb 0x493dc2
jmp 0x493e2b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00493d60

Function at 0x494ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x494f66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb7102fb76e646557
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xfd
movabs rdx, 0x805050804040706
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x507
xor eax, eax
nop
jmp 0x494f00
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x494f32
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x494f57
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 9
jb 0x494ee2
jmp 0x494f4b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00454ec0
mov eax, edi
mov ecx, 9
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00494ea0
Function at 0x496780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49689a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc7c7b5cbce75d134
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1a74cfb687476922
mov qword [rsp + 0x20], rdx
movabs rdx, 0x126d1a74cfb68747
mov qword [rsp + 0x22], rdx
movabs rdx, 0x71156938abd18669
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x101816030d0d0003
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1114080a06111018
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10f080304010b04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140518060c190b15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x613100a07011205
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x496837
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x26
jge 0x496869
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x49688d
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x1a
jb 0x49681d
jmp 0x496881
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00443420
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00454ec0
nop
call fcn.00452c40
nop
jmp fcn.00496780
Function at 0x497f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49807d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x236111f82a722ce0
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc76e409320202361
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe76d3554ded6c67c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa09130f0d050e11
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe11000913040e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe07011015131500
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30b130b00010509
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x498020
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x49804d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x498070
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x497fff
jmp 0x498064
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.00497f80

Function at 0x498620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49871d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7161732d68586536
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x456b426a53674a71
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656d1e54876f6744
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc080e0f14090f00
mov qword [rsp + 0x34], rdx
movabs rdx, 0x7110d0803081010
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x50b020607110d08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8050412100d1105
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4986c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4986ed
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x498710
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x49869f
jmp 0x498704
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.00498620
Function at 0x499c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499d7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x832d741361d985d4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2c6e61229e1b832d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1a6d4aae96d72937
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x112011213021312
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1507110007070810
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x90009090f011507
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4090e13150d0a06
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x499d20
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x499d4d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x499d70
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x499cff
jmp 0x499d64
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.00499c80

Function at 0x499fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a0bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x177422e54520b40d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x64db61dc4020c7c5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x650e695413641833
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc130704090e1608
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1616130901000710
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe1303110b051616
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160b080c13000909
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x49a060
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x49a08d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49a0b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x49a03f
jmp 0x49a0a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00454ec0
mov eax, edi
mov ecx, 0x18
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.00499fc0
Function at 0x49c4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c5da
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x35e5720966771b32
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xeb2a11d3d3d7f96c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa06eeb2a11d3d3d7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x18b42684db6427b8
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x19070a070a151615
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1190619070a07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50c17180e0f1913
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc110b050d170916
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60c0e0504110c12
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x49c577
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x24
jge 0x49c5a9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x49c5cd
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0x1a
jb 0x49c55d
jmp 0x49c5c1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00443420
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00454ec0
nop
call fcn.00452c40
nop
jmp fcn.0049c4c0

Function at 0x49c600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c727
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x35ff73668e6d6172
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6472fa81e4487453
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20656dff87606472
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf806d9054865eb28
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa07120b021c0502
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x170c030700001110
mov qword [rsp + 0x44], rdx
movabs rdx, 0x21a001b170c0307
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a051c0619050b1d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b06020b110d1a0d
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb0b17061d0a0211
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x49c6c9
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2c
jge 0x49c6f7
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x49c71a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x49c6ac
jmp 0x49c70e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00443420
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1e
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0049c600