joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4768a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476958
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xef6564a2ab2f82b1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100020007000304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
jmp 0x4768f8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x476928
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47694b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4768db
jmp 0x47693f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004768a0

Function at 0x476980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476a46
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4fdc6df0e4fe6540
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x74
movabs rdx, 0x200000704050702
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4070603
xor eax, eax
nop
jmp 0x4769e0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x476a12
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x476a37
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
cmp rsi, 9
jb 0x4769c2
jmp 0x476a2b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00476980
Function at 0x4771e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4772dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6172dd68d334f64e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xba075f2d6527c661
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65e1693750d6ddd0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x309010d080e1305
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10020201010d020b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x150f030f05111002
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150b130b15160b05
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x477280
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4772ad
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4772d0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x47725f
jmp 0x4772c4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004771e0

Function at 0x479660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47974a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x651612650e441ac9
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5f651612650e441a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xff2f2169301d652c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6010206060f0e0b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1003020c05090601
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10030001030c0001
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4796ed
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x47971a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47973d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x4796d0
jmp 0x479731
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00479660
Function at 0x47a6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a79d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xed7469fee7f86ede
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x23
movabs rdx, 0x802080703080400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x408
xor eax, eax
nop
jmp 0x47a740
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x47a76d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47a790
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x47a722
jmp 0x47a784
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0047a6e0
Function at 0x487020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48711d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdfefa07bf865ed70
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7a61747920d2d787
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6f67366f96f8b02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc050a0a05110813
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc1701060f070909
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x7170c1701060f07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1313051016031304
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4870c0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4870ed
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x487110
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x48709f
jmp 0x487104
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00487020
Function at 0x489ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489f66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7a744f9ba2667e72
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x63
movabs rdx, 0x801010503040304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x107
xor eax, eax
nop
jmp 0x489f00
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x489f32
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x489f57
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 9
jb 0x489ee2
jmp 0x489f4b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00489ea0

Function at 0x48b480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b53d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69836eb3cebe610a
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xc7
movabs rdx, 0x603060304020400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x608
xor eax, eax
nop
jmp 0x48b4e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x48b50d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48b530
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x48b4c2
jmp 0x48b524
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0048b480
Function at 0x48bb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48bca7
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x26e5632cec6669db
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x31613f636ef16620
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7574b4ea31613f63
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x746e6920c9596ed3
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0d565230fc372ed
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6172f1ae69651fd0
mov qword [rsp + 0x42], rdx
movabs rdx, 0x25281c23031e2b22
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x12800201e07140a
mov qword [rsp + 0x52], rdx
movabs rdx, 0x202b041515130128
mov qword [rsp + 0x58], rdx
movabs rdx, 0x140d290f1420110f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1614171e15110400
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1420281f06102924
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x48bc47
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2e
jge 0x48bc77
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2c
jae 0x48bc9a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x2c
jb 0x48bc2a
jmp 0x48bc8e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2c
call fcn.00441380
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2c
call fcn.00451880
mov eax, edi
mov ecx, 0x2c
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0048bb60
Function at 0x48cbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48cccc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3a746365f6136346
mov qword [rsp + 0x19], rdx
movabs rdx, 0x56664e3a345a555c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x724b632da46f2c56
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5ceb374f08204b21
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20f0f091b010a10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1203120b0a17001d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb120800150d1418
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c0a0c121a1e0b09
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x48cc68
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x48cc9c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x48ccbf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 0x1f
jb 0x48cc4e
jmp 0x48ccb3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00451880
mov eax, edi
mov ecx, 0x1f
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0048cbc0
Function at 0x48f5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x48f732
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x913b76656c66751a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa84e2ebf82878d49
mov qword [rsp + 0x22], rdx
movabs rdx, 0x734f8f809a4da84e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9f6e4552c99a385c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57c4717579a37866
mov qword [rsp + 0x38], rdx
movabs rdx, 0x276601916f782066
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1118162924200c0f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x292a0a1d2801191d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5071309120f230b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x92d2a0821071e29
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2b14240f26202c0b
mov qword [rsp + 0x68], rdx
movabs rdx, 0xb071709090e21
mov qword [rsp + 0x70], rdx
movabs rdx, 0x920102a210b0613
mov qword [rsp + 0x78], rdx
movabs rdx, 0x212425001b001a08
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x48f6cd
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x40
jge 0x48f6ff
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2e
jae 0x48f725
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0x2e
jb 0x48f6b3
jmp 0x48f719
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x2e
call fcn.00441380
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2e
call fcn.00451880
mov eax, edi
mov ecx, 0x2e
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0048f5c0
Function at 0x490460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x4905c0
push rbp
mov rbp, rsp
sub rsp, 0xc0
movabs rdx, 0xde72c874d76c4b20
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa5b0dff203f2a954
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6f20063854a5b0df
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65c5cc20e434ebe8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1d74c6726f742bde
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20dc656f64e6dd44
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6576516828c64a6e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2e058c09c96e1d20
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7c203e72c1c91ec4
mov qword [rsp + 0x58], rdx
movabs rdx, 0x654b7e617c677061
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1b22163603092747
mov qword [rsp + 0x68], rdx
lea rdi, [rsp + 0x70]
lea rsi, [0x006a56a0]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00451eba
mov rbp, qword [rbp]
xor eax, eax
jmp 0x490560
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x58
jge 0x49058d
movzx edx, byte [rsp + rax + 0x68]
movzx esi, byte [rsp + rax + 0x69]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x4d
jae 0x4905b3
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x4d
jb 0x490542
jmp 0x4905a7
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x4d
call fcn.00441380
add rsp, 0xc0
pop rbp
ret
mov eax, esi
mov ecx, 0x4d
call fcn.00451880
mov eax, edi
mov ecx, 0x4d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00490460
Function at 0x491260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4913cc
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xc6e68474cc70ffa0
mov qword [rsp + 0x18], rdx
movabs rdx, 0x616320bedc606156
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3a73616320bedc60
mov qword [rsp + 0x22], rdx
movabs rdx, 0x14d53cfd6fa06465
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7971202edda16168
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc9dc84e923051e0c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x129001427241725
mov qword [rsp + 0x42], rdx
movabs rdx, 0x521180b11061421
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x23001e030b110521
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2625280a1d0b2028
mov qword [rsp + 0x58], rdx
movabs rdx, 0x31d241c2306191e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1e281f0c28221616
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc1c290719111629
mov qword [rsp + 0x70], rdx
movabs rdx, 0x101711290a221900
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x491367
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x3e
jge 0x49139c
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2a
jae 0x4913bf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
cmp rsi, 0x2a
jb 0x49134d
jmp 0x4913b3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2a
call fcn.00441380
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00451880
mov eax, edi
mov ecx, 0x2a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00491260
Function at 0x491740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x491878
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x15a465744970610e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6c47613e20792800
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8e6536ede28d2af2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x17df65f309190add
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf221fd920c650569
mov qword [rsp + 0x38], rdx
movabs rdx, 0x131b082724190014
mov qword [rsp + 0x40], rdx
movabs rdx, 0x211b071e23081526
mov qword [rsp + 0x48], rdx
movabs rdx, 0x61b092509171219
mov qword [rsp + 0x50], rdx
movabs rdx, 0x111a1b1724101c18
mov qword [rsp + 0x58], rdx
movabs rdx, 0x171c1f1918240e27
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc1f180915250c1b
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x491818
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x30
jge 0x491848
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x49186b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x28
jb 0x4917fb
jmp 0x49185f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x28
call fcn.00441380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00451880
mov eax, edi
mov ecx, 0x28
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00491740

Function at 0x492020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49210a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x59746f626c4f6588
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5c638459746f626c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6c714e66292e6660
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70e040a050a0407
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20e000e0f04090b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x811090c0b020505
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4920ad
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4920da
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4920fd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x492090
jmp 0x4920f1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00492020
Function at 0x492440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49252a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x706e6365487f2f8a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x56706e6365487f2f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7484497a6e726c80
mov qword [rsp + 0x28], rdx
movabs rdx, 0x109010d030c0b06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70f000f07020c00
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc000f010b090b02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4924cd
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4924fa
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x49251d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4924b0
jmp 0x492511
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00492440

Function at 0x4929e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x492aec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x207361afc7b13a7d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6975ee5db3f7766f
mov qword [rsp + 0x23], rdx
movabs rdx, 0x706975ee5db3f776
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e6582621d5920b2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x102080e00030b0a
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd13111614040403
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x101502140d131116
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0c0b14130b0c04
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x492a88
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x492abc
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x492adf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0x19
jb 0x492a6e
jmp 0x492ad3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004929e0
Function at 0x492fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493066
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7bce2e0cc7e780a1
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x6e
movabs rdx, 0x300000104040002
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6040307
xor eax, eax
nop
jmp 0x493000
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x493032
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x493057
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
cmp rsi, 9
jb 0x492fe2
jmp 0x49304b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00492fa0

Function at 0x493760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49384c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2ea5a565f5b5a608
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc308fe2ea5a565f5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x78655cf8b12ecaaa
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6080f0c10031005
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0c0e090502000a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20b0a0603020110
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4937ea
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x49381c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49383f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x13
jb 0x4937d0
jmp 0x493833
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00493760