joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46f180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f245
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xeb696c6f7dd1f299
mov qword [rsp + 0x33], rdx
movabs rdx, 0x55e0ea5f6eeb696c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7310daef88057fde
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30f0e1107001003
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x10070113110010
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd120b100a020c12
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x46f228
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
movzx r9d, byte [rsp + rdi + 0x33]
mov byte [rsp + rdi + 0x33], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jl 0x46f1f0
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.0046f180

Function at 0x4700c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470185
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x619fa0de8f72d276
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9eca619fa0de8f72
mov qword [rsp + 0x30], rdx
movabs rdx, 0x89919fc4d2629aa6
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0603100105040d
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa02080e04110f06
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80900000b050d0e
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x470168
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
movzx r9d, byte [rsp + rdi + 0x2e]
mov byte [rsp + rdi + 0x2e], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jl 0x470130
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.004419a0
add rsp, 0x40
pop rbp
ret
call fcn.004506a0
jmp fcn.004700c0

Function at 0x4779e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x477a7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69c245d5c2d6dd49
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xcec4
movabs rdx, 0x608020103090300
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x4040504
xor eax, eax
jmp 0x477a60
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x75]
movzx r9d, byte [rsp + rdi + 0x26]
mov byte [rsp + rdi + 0x26], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x75]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0xc
jl 0x477a23
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.004419a0
add rsp, 0x30
pop rbp
ret
nop dword [rax]
call fcn.004506a0
jmp fcn.004779e0
Function at 0x47b8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b984
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xaf49a5b5ded443e2
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x45af49a5b5ded443
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd7756eda746e2fe4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x108080507050210
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x904010808050705
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8050a000d03
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x47b967
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2f]
sub r8d, edx
add r8d, 0xffffffa3
movzx r9d, byte [rsp + rdi + 0x2f]
mov byte [rsp + rdi + 0x2f], r8b
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jl 0x47b930
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.004419a0
add rsp, 0x40
pop rbp
ret
call fcn.004506a0
jmp fcn.0047b8c0

Function at 0x47c0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c156
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x43184330654b221c
mov qword [rsp + 0x31], rdx
movabs rdx, 0xd7132502f4653743
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe06000c0b0a0e0a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc0805040e0d0e06
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb0e060a07020102
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x47c139
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x31]
sub r8d, edx
add r8d, 0x3a
movzx r9d, byte [rsp + rdi + 0x31]
mov byte [rsp + rdi + 0x31], r8b
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
cmp rax, 0x16
jl 0x47c102
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.004419a0
add rsp, 0x40
pop rbp
ret
call fcn.004506a0
nop dword [rax + rax]
jmp fcn.0047c0a0

Function at 0x47c180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c236
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc76ee1fd89741112
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x78e08b1e291fc76e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50c0b0c0004030b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x703050c0b0c0004
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa0c08010b090307
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x47c219
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2a]
sub r8d, edx
add r8d, 0x59
movzx r9d, byte [rsp + rdi + 0x2a]
mov byte [rsp + rdi + 0x2a], r8b
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x12
jl 0x47c1e2
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.004419a0
add rsp, 0x38
pop rbp
ret
call fcn.004506a0
nop dword [rax + rax]
jmp fcn.0047c180
Function at 0x47c520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c602
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7964c9c2b1359450
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc66118b4b7c3d618
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x74263965c66118b4
mov qword [rsp + 0x40], rdx
movabs rdx, 0xcc72224d236ec869
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120f0a010b190803
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc0d1b02070d1505
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30b11170c0d1b02
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90f07040c17111b
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x47c5e5
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x34]
sub r8d, edx
add r8d, 0xffffffbe
movzx r9d, byte [rsp + rdi + 0x34]
mov byte [rsp + rdi + 0x34], r8b
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x1c
jl 0x47c5ae
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.0047c520
Function at 0x48a040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a0dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1261f843652b0a49
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xfc
movabs rdx, 0x404010107050107
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x7020807
xor eax, eax
nop
jmp 0x48a0c0
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
movzx r9d, byte [rsp + rdi + 0x27]
mov byte [rsp + rdi + 0x27], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0xc
jl 0x48a082
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.004419a0
add rsp, 0x30
pop rbp
ret
nop dword [rax]
call fcn.004506a0
jmp fcn.0048a040

Function at 0x48a200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a30f
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x1a372e6fa07437a3
mov qword [rsp + 0x43], rdx
movabs rdx, 0x6eeb09c1421a372e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2026c8a461762064
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc0c9b564afb842ed
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb1bde2eccd0497da
mov qword [rsp + 0x60], rdx
movabs rdx, 0x524090a1c180b17
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1211a1312210717
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1b1201211a131221
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1a05090006030a18
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x2421032215201711
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1e1d1f23061e1a01
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x48a2f2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x43]
sub r8d, edx
add r8d, 0xffffffc5
movzx r9d, byte [rsp + rdi + 0x43]
mov byte [rsp + rdi + 0x43], r8b
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
cmp rax, 0x2a
jl 0x48a2bb
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x25
call fcn.004419a0
add rsp, 0x68
pop rbp
ret
call fcn.004506a0
jmp fcn.0048a200
Function at 0x48c6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c7b4
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2952426078655d23
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x5876566415295242
mov qword [rsp + 0x40], rdx
movabs rdx, 0x430bf34746e542f8
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd130a0e00140813
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe04110d06100806
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc071310130f0e04
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x50f0100120a140c
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x48c797
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
movzx r9d, byte [rsp + rdi + 0x3b]
mov byte [rsp + rdi + 0x3b], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
cmp rax, 0x1e
jl 0x48c75f
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.0048c6e0

Function at 0x48d980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48da1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3a2ce3656c3ed3bc
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x20
movabs rdx, 0x605000200000006
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x50201
xor eax, eax
nop
jmp 0x48da00
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
movzx r9d, byte [rsp + rdi + 0x27]
mov byte [rsp + rdi + 0x27], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0xc
jl 0x48d9c2
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.004419a0
add rsp, 0x30
pop rbp
ret
nop dword [rax]
call fcn.004506a0
jmp fcn.0048d980

Function at 0x48e580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e616
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3a1be52fd1662a14
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x20
movabs rdx, 0x805000408030404
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x80106
xor eax, eax
nop
jmp 0x48e5f9
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x27]
sub r8d, edx
add r8d, 0x59
movzx r9d, byte [rsp + rdi + 0x27]
mov byte [rsp + rdi + 0x27], r8b
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
cmp rax, 0xc
jl 0x48e5c2
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.004419a0
add rsp, 0x30
pop rbp
ret
call fcn.004506a0
nop dword [rax + rax]
jmp fcn.0048e580
Function at 0x492260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x492343
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2eb07fa7a2b3a8fa
mov qword [rsp + 0x35], rdx
movabs rdx, 0xbcc7b401b2b0acb6
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xc1c273bcc7b401b2
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb5ba9a6e696f50a4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11908040e0a1911
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1000c061a120d05
mov qword [rsp + 0x21], rdx
movabs rdx, 0x9010f0601000c06
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb130318000b0202
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x492326
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x61]
movzx r9d, byte [rsp + rdi + 0x35]
mov byte [rsp + rdi + 0x35], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x61]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x1c
jl 0x4922ee
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x1b
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.00492260

Function at 0x493880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49392b
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6469676766556f7f
mov qword [rsp + 0x29], rdx
movabs rdx, 0x4073672f61562064
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe000b0c05020b0a
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd010a0e05040e03
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x493909
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x29]
sub r8d, edx
add r8d, 0x10
movzx r9d, byte [rsp + rdi + 0x29]
mov byte [rsp + rdi + 0x29], r8b
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jl 0x4938d2
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
nop dword [rax + rax]
call fcn.004419a0
add rsp, 0x38
pop rbp
ret
call fcn.004506a0
jmp fcn.00493880
Function at 0x493940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x493ac1
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0x3a4463d2e70c65e4
mov qword [rsp + 0x62], rdx
movabs rdx, 0x74d47c28f7b392f3
mov qword [rsp + 0x6a], rdx
movabs rdx, 0xd67517d715e374d4
mov qword [rsp + 0x70], rdx
movabs rdx, 0xa6574ae69710662
mov qword [rsp + 0x78], rdx
movabs rdx, 0x9a206e98206e6620
mov qword [rsp + 0x80], rdx
movabs rdx, 0xec3419176c61d66e
mov qword [rsp + 0x88], rdx
movabs rdx, 0x1834dc506e1d74a3
mov qword [rsp + 0x90], rdx
movabs rdx, 0x72087d976b6f2720
mov qword [rsp + 0x98], rdx
movabs rdx, 0x112e333a163a2c3a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1227180a0a102211
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd09390e06300227
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x351f1700133b1a2a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x110b032b02112530
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x4092a250a0e1837
mov qword [rsp + 0x42], rdx
movabs rdx, 0x15390d1d3c300a34
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x813093935122d0c
mov qword [rsp + 0x52], rdx
movabs rdx, 0x2b0c371332091237
mov qword [rsp + 0x5a], rdx
xor eax, eax
jmp 0x493aa0
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x62]
sub r8d, edx
add r8d, 0xffffff9f
movzx r9d, byte [rsp + rdi + 0x62]
mov byte [rsp + rdi + 0x62], r8b
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rsi + 0x62], dl
add rax, 2
cmp rax, 0x48
jl 0x493a69
xor eax, eax
lea rbx, [rsp + 0x62]
mov ecx, 0x3e
call fcn.004419a0
add rsp, 0xa0
pop rbp
nop
ret
call fcn.004506a0
jmp fcn.00493940

Function at 0x4973a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x497464
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1f74e1dac9dc2d72
mov qword [rsp + 0x35], rdx
movabs rdx, 0xebd5561f74e1dac9
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9f94ce6c11198675
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2110e0a120c0c02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x411100209040410
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc0d050703070110
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x497447
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x35]
sub r8d, edx
add r8d, 0x63
movzx r9d, byte [rsp + rdi + 0x35]
mov byte [rsp + rdi + 0x35], r8b
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jl 0x497410
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004973a0
Function at 0x498460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498524
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x33ed63073bede272
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2cd633ed63073bed
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7865c7c2b965756c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20d0e110d080d11
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe080f0e010e020d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706031104091104
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x498507
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2e]
sub r8d, edx
add r8d, 0x56
movzx r9d, byte [rsp + rdi + 0x2e]
mov byte [rsp + rdi + 0x2e], r8b
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jl 0x4984d0
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.004419a0
add rsp, 0x40
pop rbp
ret
call fcn.004506a0
jmp fcn.00498460

Function at 0x49a620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a6bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5c1a76e69de2ee6
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x43d
movabs rdx, 0x2070206060705
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x90700
xor eax, eax
jmp 0x49a6a0
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
movzx r9d, byte [rsp + rdi + 0x26]
mov byte [rsp + rdi + 0x26], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0xc
jl 0x49a663
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.004419a0
add rsp, 0x30
pop rbp
ret
nop dword [rax]
call fcn.004506a0
jmp fcn.0049a620

Function at 0x49c0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c185
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc70797434f7f68c
mov qword [rsp + 0x33], rdx
movabs rdx, 0x52d5ed69200c7079
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2009d8ed91b151d3
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30f0e1107001003
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x10070113110010
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd120b100a020c12
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x49c168
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
movzx r9d, byte [rsp + rdi + 0x33]
mov byte [rsp + rdi + 0x33], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jl 0x49c130
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.0049c0c0
Function at 0x49c5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49c661
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x720620a4099535fe
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xa5749d72
movabs rdx, 0x8000a0202040104
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x401000302060800
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x49c643
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
movzx r9d, byte [rsp + rdi + 0x2d]
mov byte [rsp + rdi + 0x2d], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jl 0x49c60b
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004419a0
add rsp, 0x38
pop rbp
nop
ret
call fcn.004506a0
jmp fcn.0049c5c0

Function at 0x49d8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d99d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8a64feae8f160c1d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x741c1a6d750b7261
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20a0d00000e0503
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe0a0e070100020a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50e04070e000d01
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x49d980
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
movzx r9d, byte [rsp + rdi + 0x30]
mov byte [rsp + rdi + 0x30], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x16
jl 0x49d942
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.004419a0
add rsp, 0x40
pop rbp
ret
nop dword [rax]
call fcn.004506a0
jmp fcn.0049d8e0

Function at 0x49d9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49da84
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x78641c696d6e5d63
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x5f78641c696d6e5d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6b6d696e6864685f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10800100a050710
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf08090c05020108
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50c0f06060406
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x49da67
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2f]
sub r8d, edx
add r8d, 0x15
movzx r9d, byte [rsp + rdi + 0x2f]
mov byte [rsp + rdi + 0x2f], r8b
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x16
jl 0x49da30
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.004419a0
add rsp, 0x40
pop rbp
ret
call fcn.004506a0
jmp fcn.0049d9c0