joyce8/EMBER2024-capa huggingface dataset:
Function at 0x48b240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b336
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2d22eb9861766e9e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc12d22eb9861766e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xaaa27a60f82056a1
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6090508100a080c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0706090508100a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40808090d080f00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x48b2d0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffae
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x48b302
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48b329
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffae
add r8d, edx
cmp rsi, 0x11
jb 0x48b2b6
nop
jmp 0x48b31d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0048b240

Function at 0x48bf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48bfd2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6f5e4658584d6a31
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x2761
movabs rdx, 0x406020900020904
mov qword [rsp + 0x22], rdx
movabs rdx, 0x906060901030406
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x48bf69
movzx r9d, byte [rsp + rsi + 0x18]
dec r9d
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x48bf9a
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xa
jae 0x48bfc5
movzx r8d, byte [rsp + rdi + 0x18]
dec r8d
add r8d, edx
cmp rsi, 0xa
jb 0x48bf50
jmp 0x48bfb5
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0048bf00
Function at 0x48c6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c766
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x9d7c7c6e94877c8b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x503020607020606
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6000105
xor eax, eax
jmp 0x48c700
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x48c72d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x48c754
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x48c6e2
jmp 0x48c748
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0048c6a0

Function at 0x48f000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f0c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe073652869a01b42
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x704040207040504
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4040701
xor eax, eax
jmp 0x48f060
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x3c
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x48f091
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x48f0bb
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x3c
add r8d, edx
cmp rsi, 8
jb 0x48f042
jmp 0x48f0af
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0048f000

Function at 0x4923a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49246b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8661ea8164d30719
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x95
movabs rdx, 0x504000207080007
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1050708
xor eax, eax
jmp 0x492404
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x492437
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x49245e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4923e7
jmp 0x492452
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004923a0
Function at 0x492a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x492ac8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5a3e3879616c5956
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x5c
movabs rdx, 0x101050008070608
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0
xor eax, eax
jmp 0x492a60
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 2
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x492a91
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x492abb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 2
add r8d, edx
cmp rsi, 9
jb 0x492a46
jmp 0x492aaf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00492a00

Function at 0x492cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x492d9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x611c4a666516654d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x283072611c4a6665
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa02060a02060a09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa07050a09090a02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x492d35
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x492d68
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x492d8f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x492d18
jmp 0x492d83
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.00492cc0
Function at 0x493c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x493cfc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5f532c315f371e45
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2001435f532c315f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x204000a06090400
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x500060801080204
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x493c92
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x11
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x493cc8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x493cef
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x11
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x493c78
jmp 0x493ce3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.00493c20

Function at 0x494c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x494d16
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x297516cd5f632c18
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xda297516cd5f632c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1f7c6923ded04199
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2090c040c020807
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1007010b0f000b04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x200050d0c040002
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x494cb0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x30
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x494ce2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x494d09
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x30
add r8d, edx
cmp rsi, 0x11
jb 0x494c96
nop
jmp 0x494cfd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00494c20
Function at 0x494e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x494f48
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x416572172643611e
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x26
movabs rdx, 0x207040300080004
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
jmp 0x494ee0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x20
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x494f11
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x494f3b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x20
add r8d, edx
cmp rsi, 9
jb 0x494ec6
jmp 0x494f2f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00494e80

Function at 0x495720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4957eb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6d6f71825972755f
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x75736582
movabs rdx, 0xb010b0805000003
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x3040a
xor eax, eax
jmp 0x495787
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4957b7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x4957de
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x49576a
jmp 0x4957d2
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00495720

Function at 0x495f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x496006
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x63c298c172619cad
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4060600040505
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x601
xor eax, eax
nop
jmp 0x495fa0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x495fcd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x495ff4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x495f82
jmp 0x495fe8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00495f40
Function at 0x497140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x497206
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3209fb6e39f71043
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1060305060203
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x507
xor eax, eax
nop
jmp 0x4971a0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4971cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4971f4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x497182
jmp 0x4971e8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00497140

Function at 0x497680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x497788
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6f69787275708f74
mov qword [rsp + 0x18], rdx
movabs rdx, 0x816880796f697872
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x727474656d9c7070
mov qword [rsp + 0x24], rdx
movabs rdx, 0x120f01050b080410
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x12120c010b000e00
mov qword [rsp + 0x34], rdx
movabs rdx, 0x907010412120c01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x307090b070a0212
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x497720
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffdb
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x497751
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x49777b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffdb
add r8d, edx
cmp rsi, 0x14
jb 0x497705
jmp 0x49776f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00497680
Function at 0x497960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x497a32
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6ed0bac018ca6fb8
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xc7eeadfd
movabs rdx, 0xb000a0b04090302
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x602080506080b00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4979cb
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffa3
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4979fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x497a25
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffa3
add r8d, edx
cmp rsi, 0xc
jb 0x4979b1
jmp 0x497a17
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00497960

Function at 0x498260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498392
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x65d715c2bb9b29ed
mov qword [rsp + 0x18], rdx
movabs rdx, 0x61b065d715c2bb9b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x56ca67495f74d2d5
mov qword [rsp + 0x22], rdx
movabs rdx, 0xad465f5ab3626105
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x746e3b6fe85f6564
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1601180b010b0800
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x12051102101d1601
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1041518050a0a1f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x102161119000612
mov qword [rsp + 0x50], rdx
movabs rdx, 0x16030215020a0b19
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x49832c
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x71
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x26
jge 0x49835d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x498385
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x71
add r8d, edx
cmp rsi, 0x22
jb 0x498312
jmp 0x498378
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x22
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x22
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x22
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00498260
Function at 0x4983a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4984a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x72b95f85659589a8
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb0f398709872b95f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x77226574788c8165
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0a060c13060400
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0c0a0f130e1308
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0e0f0c0a0f130e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc1401020e080a06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x498440
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffc6
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x498471
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x49849b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffc6
add r8d, edx
cmp rsi, 0x15
jb 0x498425
jmp 0x49848f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004983a0

Function at 0x4984c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4985b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1cdbcad8d8a2745b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb71cdbcad8d8a274
mov qword [rsp + 0x20], rdx
movabs rdx, 0xcc3f27ad74c33e43
mov qword [rsp + 0x28], rdx
movabs rdx, 0x303060e0a040b10
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf040f0f0d060006
mov qword [rsp + 0x38], rdx
movabs rdx, 0x702080505070d05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x498550
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffff87
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x498582
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4985a9
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffff87
add r8d, edx
cmp rsi, 0x11
jb 0x498536
nop
jmp 0x49859d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.004984c0
Function at 0x499060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499168
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc8a47efbd32e61c4
mov qword [rsp + 0x19], rdx
movabs rdx, 0xaf81c4c8a47efbd3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xcbfd6170531414f2
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa08070d09030612
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0600120b000203
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0d02090b060012
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12080c0511041205
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x499100
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x3d
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x499131
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x49915b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x3d
add r8d, edx
cmp rsi, 0x13
jb 0x4990e5
jmp 0x49914f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00499060

Function at 0x499180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4992a8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xd66cebcc7065cfe9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x946163e3f8976909
mov qword [rsp + 0x26], rdx
movabs rdx, 0x546105db946163e3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x617261f45fe2ccbe
mov qword [rsp + 0x32], rdx
movabs rdx, 0x60f11100a100f08
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa141801051b060f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4090b071b090b08
mov qword [rsp + 0x48], rdx
movabs rdx, 0x91500060b130c1b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x150f0b1314070516
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x499240
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x5b
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x499271
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x49929b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x5b
add r8d, edx
cmp rsi, 0x1c
jb 0x499223
jmp 0x49928f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461e80
mov eax, edi
mov ecx, 0x1c
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00499180