joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4734a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473586
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9596b949498fad93
mov qword [rsp + 0x31], rdx
movabs rdx, 0xa375ac9944a3d495
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc020d060c0e090b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5010c020d060c0e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x708010508000008
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x473520
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x473552
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x473577
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0xf
jb 0x473502
jmp 0x47356b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00448840
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045b700
mov eax, edi
mov ecx, 0xf
nop
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004734a0

Function at 0x473de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473e98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5a5662643d746659
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3010406060704
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x2010503
xor eax, eax
jmp 0x473e39
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x473e68
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x473e8b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x473e1c
jmp 0x473e7f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045b700
mov eax, edi
mov ecx, 8
call fcn.0045b700
nop
call fcn.00459420
nop dword [rax]
jmp fcn.00473de0

Function at 0x477a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477add
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x614d5f721c0c4bc0
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x1574
movabs rdx, 0x2030309000102
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x301
xor eax, eax
jmp 0x477a80
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x477aad
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x477ad0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x477a63
jmp 0x477ac4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045b700
mov eax, edi
mov ecx, 0xa
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.00477a20
Function at 0x478340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478448
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1e642e75283812ea
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xee6163e96fa8c4f9
mov qword [rsp + 0x44], rdx
movabs rdx, 0x745d6e65ee6163e9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6b72612c5fdecb24
mov qword [rsp + 0x50], rdx
movabs rdx, 0x101140c040a120f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x900150a160f07
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1508070a04000009
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x312140502151816
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4783eb
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
cmp rax, 0x1e
jge 0x478418
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x47843b
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4783ce
jmp 0x47842f
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00448840
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045b700
mov eax, edi
mov ecx, 0x1c
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.00478340

Function at 0x478c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478d6c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x73638a65676e9053
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xf073638a65676e90
mov qword [rsp + 0x30], rdx
movabs rdx, 0x83ee6edc897965e7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80f0310010b050c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30b080f0310010b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd0901100709050c
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x478d0a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x478d3c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x478d5f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0x11
jb 0x478cf0
jmp 0x478d53
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00448840
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045b700
mov eax, edi
mov ecx, 0x11
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.00478c80
Function at 0x478e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478eea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfa61839f6d7265ee
mov qword [rsp + 0x34], rdx
movabs rdx, 0x9aeb505ffa61839f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb294a0ae8c0d7493
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0707000f050f0e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40b110c10120c07
mov qword [rsp + 0x24], rdx
movabs rdx, 0x51300120005130a
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x478e8d
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jge 0x478eba
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x478edd
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x478e70
jmp 0x478ed1
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045b700
mov eax, edi
mov ecx, 0x14
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.00478e00
Function at 0x48bf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c05d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x98b69c161fc4436
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65202d6e3b41702e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc76ffd321af5d208
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1115080204080608
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4130b11070d1217
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1514040d12151317
mov qword [rsp + 0x28], rdx
movabs rdx, 0x810000812020a01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48c000
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x48c02d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x48c050
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x48bfdf
jmp 0x48c044
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00448840
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045b700
mov eax, edi
mov ecx, 0x18
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.0048bf60

Function at 0x48d120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48d21d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd09c725d3e982e7b
mov qword [rsp + 0x39], rdx
movabs rdx, 0x4a9ff22ebf00ddd0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x332ef0e730eb2e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120904130507070a
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd13100803000808
mov qword [rsp + 0x21], rdx
movabs rdx, 0x80c000a090e08
mov qword [rsp + 0x29], rdx
movabs rdx, 0xc0c02040612000d
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x48d1c0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x48d1ed
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x48d210
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x48d19f
jmp 0x48d204
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00448840
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045b700
mov eax, edi
mov ecx, 0x17
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.0048d120
Function at 0x48ddc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48dee7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x66a59a6f07aa9ba2
mov qword [rsp + 0x49], rdx
movabs rdx, 0x8f6420ae67688b39
mov qword [rsp + 0x51], rdx
movabs rdx, 0x6465be7cda99a58f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x80829777647f8e80
mov qword [rsp + 0x60], rdx
movabs rdx, 0x17021b10070f0e0a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3180c1d03141403
mov qword [rsp + 0x27], rdx
movabs rdx, 0x130703180c1d0314
mov qword [rsp + 0x29], rdx
movabs rdx, 0x800120808061b1e
mov qword [rsp + 0x31], rdx
movabs rdx, 0x9080e1d141e1105
mov qword [rsp + 0x39], rdx
movabs rdx, 0x1919181d17011c
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x48de89
movzx r9d, byte [rsp + rsi + 0x49]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x49], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x49], dl
add rax, 2
cmp rax, 0x2a
jge 0x48deb7
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x48deda
movzx r8d, byte [rsp + rdi + 0x49]
sub r8d, edx
cmp rsi, 0x1f
jb 0x48de6c
jmp 0x48dece
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x1f
call fcn.00448840
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.0045b700
mov eax, edi
mov ecx, 0x1f
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.0048ddc0

Function at 0x48e240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e378
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x20737365c135e7d3
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6e4ac13a386d61ba
mov qword [rsp + 0x50], rdx
movabs rdx, 0xef70edf27320df6f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x204e62ad64bb0572
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf16f036f5f6fa80a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x19250c0b171a2314
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x211c080208231c23
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe19211c08020823
mov qword [rsp + 0x28], rdx
movabs rdx, 0x11a0d0001232715
mov qword [rsp + 0x30], rdx
movabs rdx, 0x201903010d19111e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x308140b0b25110c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x48e318
movzx r9d, byte [rsp + rsi + 0x48]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x48], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x48], dl
add rax, 2
cmp rax, 0x2a
jge 0x48e348
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x48e36b
movzx r8d, byte [rsp + rdi + 0x48]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x28
jb 0x48e2fb
jmp 0x48e35f
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x28
call fcn.00448840
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.0045b700
mov eax, edi
mov ecx, 0x28
call fcn.0045b700
nop
call fcn.00459420
nop dword [rax]
jmp fcn.0048e240
Function at 0x491100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4911ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6de263ec636e7a63
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x946f6de263ec636e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5cefeb75d3ecec65
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a01100c0d110c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1009090a01100c0d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x406070404030f0b
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x49118d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x4911ba
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4911dd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x491170
jmp 0x4911d1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00448840
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045b700
mov eax, edi
mov ecx, 0x12
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.00491100

Function at 0x491e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x491ede
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf0b0e66121203862
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xb97365f0
movabs rdx, 0x7020201010a0603
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x5020305
xor eax, eax
jmp 0x491e81
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x491eae
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x491ed1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x491e64
jmp 0x491ec5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045b700
mov eax, edi
mov ecx, 0xb
call fcn.0045b700
nop
nop
call fcn.00459420
jmp fcn.00491e20
Function at 0x493ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493bcc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6cd1745772f2989e
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x66dcf277df6e656e
mov qword [rsp + 0x47], rdx
movabs rdx, 0xe866dcf277df6e65
mov qword [rsp + 0x48], rdx
movabs rdx, 0x92f507df01f9fae7
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe1312160f0e1307
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1504171409060211
mov qword [rsp + 0x27], rdx
movabs rdx, 0x61301100d000d07
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x180b150618090f15
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x493b68
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x20
jge 0x493b9c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x493bbf
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x19
jb 0x493b4e
jmp 0x493bb3
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00448840
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045b700
mov eax, edi
mov ecx, 0x19
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.00493ac0

Function at 0x494240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x49439a
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xdcc9c1b7efab43a4
mov qword [rsp + 0x59], rdx
movabs rdx, 0xdf0defe8e920badc
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe80873632074ef69
mov qword [rsp + 0x68], rdx
movabs rdx, 0x633679edb785726c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x64a21f63ddd6bd9a
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1d191d1d0310201a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1d0d0c01131b041d
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb061d0d0c01131b
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1604221b161f251f
mov qword [rsp + 0x31], rdx
movabs rdx, 0x70e08190c240a0b
mov qword [rsp + 0x39], rdx
movabs rdx, 0x221915201615191d
mov qword [rsp + 0x41], rdx
movabs rdx, 0xc05251d1b220d0a
mov qword [rsp + 0x49], rdx
movabs rdx, 0x2161b0816210025
mov qword [rsp + 0x51], rdx
xor eax, eax
jmp 0x494338
movzx r9d, byte [rsp + rsi + 0x59]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rdi + 0x59], dl
mov byte [rsp + rsi + 0x59], r8b
add rax, 2
cmp rax, 0x3a
jge 0x49436a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x27
jae 0x49438d
movzx r8d, byte [rsp + rdi + 0x59]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
cmp rsi, 0x27
jb 0x49431e
jmp 0x494381
xor eax, eax
lea rbx, [rsp + 0x59]
mov ecx, 0x27
call fcn.00448840
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.0045b700
mov eax, edi
mov ecx, 0x27
call fcn.0045b700
nop
call fcn.00459420
nop
jmp fcn.00494240
Function at 0x496fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4970ec
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xdba5746f6e0966be
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x611e04cb0adba574
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20dfd8912268f920
mov qword [rsp + 0x58], rdx
movabs rdx, 0xba172bdcb962b9ca
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa3beecd565c23934
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d0e221b1301021a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x22181d0e221b1301
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1219132208211106
mov qword [rsp + 0x23], rdx
movabs rdx, 0x101e232311230b1a
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xa1607090a1d100e
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1c091513211b1d22
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1f161e021a001524
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x497084
movzx r9d, byte [rsp + rsi + 0x4b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x4b], dl
mov byte [rsp + rsi + 0x4b], r8b
add rax, 2
cmp rax, 0x32
jge 0x4970bc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x4970df
movzx r8d, byte [rsp + rdi + 0x4b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0x25
jb 0x49706a
jmp 0x4970d3
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.00448840
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.0045b700
mov eax, edi
mov ecx, 0x25
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.00496fa0

Function at 0x497100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49724c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x6974656dfd741261
mov qword [rsp + 0x49], rdx
movabs rdx, 0x15ac206f74e4ed31
mov qword [rsp + 0x51], rdx
movabs rdx, 0x21e61ca7fdd7d815
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd0796e6176201721
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6c203a6596f32cde
mov qword [rsp + 0x68], rdx
movabs rdx, 0x73399d72f02f62ab
mov qword [rsp + 0x70], rdx
movabs rdx, 0x170e29200e10202d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2912130f11102708
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1a22142416110516
mov qword [rsp + 0x29], rdx
movabs rdx, 0x2c15100827271801
mov qword [rsp + 0x31], rdx
movabs rdx, 0x110f141a1f2a0921
mov qword [rsp + 0x39], rdx
movabs rdx, 0x1e240a27271a2203
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x4971e4
movzx r9d, byte [rsp + rsi + 0x49]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x49], dl
mov byte [rsp + rsi + 0x49], r8b
add rax, 2
cmp rax, 0x30
jge 0x49721c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2f
jae 0x49723f
movzx r8d, byte [rsp + rdi + 0x49]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
cmp rsi, 0x2f
jb 0x4971ca
jmp 0x497233
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x2f
call fcn.00448840
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.0045b700
mov eax, edi
mov ecx, 0x2f
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.00497100
Function at 0x498180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4982b8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xd6a461b57fa2a2da
mov qword [rsp + 0x47], rdx
movabs rdx, 0x20d6a461b57fa2a2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x67927346b6921d77
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7edcbdabd76313eb
mov qword [rsp + 0x58], rdx
movabs rdx, 0x736b6e6933a36369
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb1100070a111714
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1513040a0c101312
mov qword [rsp + 0x23], rdx
movabs rdx, 0x4160b141513040a
mov qword [rsp + 0x27], rdx
movabs rdx, 0x31c170401021b0c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x100607150c0014
mov qword [rsp + 0x37], rdx
movabs rdx, 0x18000a0c17090d0f
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x498255
movzx r9d, byte [rsp + rsi + 0x47]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x47], dl
mov byte [rsp + rsi + 0x47], r8b
add rax, 2
cmp rax, 0x2c
jge 0x498288
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4982ab
movzx r8d, byte [rsp + rdi + 0x47]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
nop
cmp rsi, 0x21
jb 0x49823b
jmp 0x49829f
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.00448840
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.0045b700
mov eax, edi
mov ecx, 0x21
call fcn.0045b700
nop
call fcn.00459420
nop dword [rax]
jmp fcn.00498180

Function at 0x4982e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4983cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc1b6aab85da6c3af
mov qword [rsp + 0x37], rdx
movabs rdx, 0xf0c1b6aab85da6c3
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe8af79afa44ac6b3
mov qword [rsp + 0x40], rdx
movabs rdx, 0x301000a100c000b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9020a070f040107
mov qword [rsp + 0x27], rdx
movabs rdx, 0x90c0c08050b0d06
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x49836a
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x49839c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4983bf
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0x11
jb 0x498350
jmp 0x4983b3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045b700
mov eax, edi
mov ecx, 0x11
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004982e0