joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47a120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a20a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x131d7461f5eb61ff
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5f6e131d7461f5eb
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x35f6744434e4a331
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30b0710110e030c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd070200030b0710
mov qword [rsp + 0x30], rdx
movabs rdx, 0x21000060a0c030c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47a1ad
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x47a1da
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47a1fd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x47a190
jmp 0x47a1f1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0047a120

Function at 0x47a220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a2ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7067080c74bb68bf
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xaf6b617067080c74
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60909050a0a0409
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2020904020609
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47a28f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x47a2bc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47a2df
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x47a272
jmp 0x47a2d3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0047a220
Function at 0x487ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487fac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x211a3521311c2921
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x352730211a352131
mov qword [rsp + 0x22], rdx
movabs rdx, 0x200060004080107
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x206080906000200
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x487f4f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x487f7c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x487f9f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x487f32
jmp 0x487f93
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00487ee0

Function at 0x488600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4886e6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2a334a337a93978
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa1a985a11e9b02a3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60c0c000b0c0909
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa02060c0c000b0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x806000907090d04
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x488680
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4886b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4886d7
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0xe
jb 0x488662
jmp 0x4886cb
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00488600
Function at 0x488f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488fec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x38813930aea37a31
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7238813930aea37a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc56631c27eab3568
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0d030b01080602
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100c0d0d0d0d030b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0b06100b0c0309
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x488f8a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x488fbc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x488fdf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0x11
jb 0x488f70
jmp 0x488fd3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00488f00

Function at 0x4892a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48938a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4632595d72573932
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x564c4632595d7257
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7b32775ba1398381
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80f070311050d11
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70a0d05080f0703
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70208040e09070b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x48932d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x48935a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x48937d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x489310
jmp 0x489371
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004892a0
Function at 0x4894c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4895bb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe22916242025e437
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf5e213e229162420
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3532eff4321d05f8
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0104060c0a020f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90503010910070d
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0c090503010910
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0d080c0c0b1002
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x489559
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x48958b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4895ae
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x13
jb 0x48953f
jmp 0x4895a2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004894c0

Function at 0x48b200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b30c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4d393439725c3866
mov qword [rsp + 0x34], rdx
movabs rdx, 0x364c377734494054
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x496b6934364c3777
mov qword [rsp + 0x40], rdx
movabs rdx, 0x63423b625a79303c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18171603020c1112
mov qword [rsp + 0x18], rdx
movabs rdx, 0x713091700031609
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa1b0e0207130917
mov qword [rsp + 0x24], rdx
movabs rdx, 0x140d1905080a1a03
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x48b2a8
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x48b2dc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x48b2ff
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x1c
jb 0x48b28e
jmp 0x48b2f3
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0048b200
Function at 0x48dd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48de87
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xd2c0d834b8ddabbc
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xbfe032cab7d2c0d8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x34b7453830d6ca33
mov qword [rsp + 0x28], rdx
movabs rdx, 0x313d514c9dd335d7
mov qword [rsp + 0x30], rdx
movabs rdx, 0xbbbe36d334a9de65
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1f1918190b121b03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10c1d00160921
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f1a060b08030b18
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf1713121f072324
mov qword [rsp + 0x58], rdx
movabs rdx, 0x21e150c0e060513
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48de29
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x28
jge 0x48de57
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x25
jae 0x48de7a
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x25
jb 0x48de0c
jmp 0x48de6e
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00461020
mov eax, edi
mov ecx, 0x25
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0048dd60

Function at 0x48dea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48dfd8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x1d9a08e630ebe631
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf23512b734f41d9a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6d8f330d635fbf4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xcd001095c12d2d36
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd41431d2cb16ea30
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1b201f241114021a
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6130d1d0f220a01
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x21c250b0f210613
mov qword [rsp + 0x50], rdx
movabs rdx, 0x221c080f21191319
mov qword [rsp + 0x58], rdx
movabs rdx, 0x130118240e0b0524
mov qword [rsp + 0x60], rdx
movabs rdx, 0x150d211707220415
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x48df78
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2e
jge 0x48dfa8
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x48dfcb
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x26
jb 0x48df5b
jmp 0x48dfbf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x26
call fcn.0044bb20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00461020
mov eax, edi
mov ecx, 0x26
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.0048dea0
Function at 0x494640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49478c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xa9765e6797728969
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6c3e674f6ccb6949
mov qword [rsp + 0x23], rdx
movabs rdx, 0x56c3e674f6ccb69
mov qword [rsp + 0x24], rdx
movabs rdx, 0xdfdcfbc9fa7070ad
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc3616d7269952fb2
mov qword [rsp + 0x34], rdx
movabs rdx, 0x53735c6920606e92
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x232610000104051c
mov qword [rsp + 0x44], rdx
movabs rdx, 0x141605250c280a07
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x100e040a14160525
mov qword [rsp + 0x50], rdx
movabs rdx, 0x280105181926050a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1004211b10112015
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc1c032304170803
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x494724
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2c
jge 0x49475c
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x29
jae 0x49477f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
cmp rsi, 0x29
jb 0x49470a
jmp 0x494773
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x29
call fcn.0044bb20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00461020
mov eax, edi
mov ecx, 0x29
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00494640
Function at 0x495680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x495807
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x7a73bd2720746f76
mov qword [rsp + 0x19], rdx
movabs rdx, 0x677a73bd2720746f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x278682114b739476
mov qword [rsp + 0x22], rdx
movabs rdx, 0x663730746b616360
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x722e87698d5b6474
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8132865c6c668158
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30776d6a6374e749
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1d07221d2f1a050f
mov qword [rsp + 0x4a], rdx
movabs rdx, 0xc0a0725102f2c11
mov qword [rsp + 0x52], rdx
movabs rdx, 0x2309002e280f0c0a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x92925172926042d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1c1e210d0e1f2c05
mov qword [rsp + 0x68], rdx
movabs rdx, 0x60f1b0e071a2528
mov qword [rsp + 0x70], rdx
movabs rdx, 0x91a2c0e2d0e1f14
mov qword [rsp + 0x78], rdx
movabs rdx, 0x162a04041d091c18
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4957a0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x4957d2
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x4957fa
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0x31
jb 0x495782
jmp 0x4957ee
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x31
nop
call fcn.0044bb20
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x31
call fcn.00461020
mov eax, edi
mov ecx, 0x31
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00495680
Function at 0x498340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498406
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9f1f55bbb6721bba
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x74
movabs rdx, 0x403010004010606
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7060700
xor eax, eax
nop
jmp 0x4983a0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4983d2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4983f7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 9
jb 0x498382
jmp 0x4983eb
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00498340

Function at 0x498500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4985ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x40f1edaa9576a4fc
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6240f1edaa9576a4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8af3defae271e569
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0f04100c060a00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd01030104010b01
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0703050d07030a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x49858d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4985ba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4985dd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x498570
jmp 0x4985d1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00498500
Function at 0x49be00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49bec6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x36bce96c7027f2fc
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x34
movabs rdx, 0x205020205010500
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5000606
xor eax, eax
nop
jmp 0x49be60
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x49be92
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x49beb7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 9
jb 0x49be42
jmp 0x49beab
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0049be00

Function at 0x4a37e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a389d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3b2fb12afb746e49
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x39
movabs rdx, 0x603040503030305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x708
xor eax, eax
nop
jmp 0x4a3840
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4a386d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a3890
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4a3822
jmp 0x4a3884
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004a37e0
Function at 0x4a4900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a49fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf0fe6db22ba88b0c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x87474fb000197de
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1695edf366e9ed6b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3140e0802111209
mov qword [rsp + 0x32], rdx
movabs rdx, 0x60c070a0101140b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x15011516040b060c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17000f0800121209
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a49a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4a49cd
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a49f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x4a497f
jmp 0x4a49e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004a4900
Function at 0x4a85a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a86d8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x5d9f7765a96657b6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x65a155988c5d9f77
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7ad199756f79814c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x33662dc66f6e4f7a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x208a54791b1a6368
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1f0c030b12061f19
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1d080019230b131d
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1509000920161d08
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1907081c1f13140b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x905091522190701
mov qword [rsp + 0x60], rdx
movabs rdx, 0x60e0105200a0a20
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4a8675
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x2e
jge 0x4a86a8
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4a86cb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
nop
cmp rsi, 0x25
jb 0x4a865b
jmp 0x4a86bf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
call fcn.0044bb20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00461020
mov eax, edi
mov ecx, 0x25
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004a85a0
Function at 0x4a9d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4a9e7a
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xc4ce63d66ccd65ce
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe9ebcc4f6631e520
mov qword [rsp + 0x25], rdx
movabs rdx, 0xdff4f3cf92e9ebcc
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd20d30691f48b959
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa2c73a822054946c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf06564a2699ed46f
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2111150f220d0b12
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2314001000262111
mov qword [rsp + 0x50], rdx
movabs rdx, 0x29120f1a0e0c021c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9181f17161313
mov qword [rsp + 0x60], rdx
movabs rdx, 0x7231604102c181e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x60a12271f29100f
mov qword [rsp + 0x70], rdx
movabs rdx, 0xe2c09240e1b060d
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4a9e18
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x36
jge 0x4a9e4a
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4a9e6d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x2d
jb 0x4a9dfe
jmp 0x4a9e61
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2d
call fcn.0044bb20
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00461020
mov eax, edi
mov ecx, 0x2d
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.004a9d20