joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47d600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d754
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x88], xmm15
movups xmmword [rsp + 0x98], xmm15
movabs rdx, 0x45180e550215011c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x512d2f170e21161e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x16101366622e3609
mov qword [rsp + 0x46], rdx
movabs rdx, 0x92b293b06126d59
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x131314181d0f0d1c
mov qword [rsp + 0x56], rdx
movabs rdx, 0x1912131314181d0f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x141813121d1e0704
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe02070c1113170b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x100d11000a181400
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x47d6c9
movzx r8d, byte [rsp + rbx + 0x36]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rsi + 0x36], dl
mov byte [rsp + rbx + 0x36], dil
add rax, 2
cmp rax, 0x22
jge 0x47d6f9
movzx edx, byte [rsp + rax + 0x56]
movzx ebx, byte [rsp + rax + 0x57]
mov esi, edx
xor edx, ebx
add edx, eax
nop
cmp rsi, 0x20
jae 0x47d747
movzx edi, byte [rsp + rsi + 0x36]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x35]
cmp rbx, 0x20
jb 0x47d6af
jmp 0x47d73b
movups xmmword [rsp + 0x16], xmm15
movups xmmword [rsp + 0x26], xmm15
xor eax, eax
jmp 0x47d715
movzx ecx, byte [rsp + rax + 0x36]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 0x20
jl 0x47d709
movups xmm0, xmmword [rsp + 0x16]
movups xmmword [rsp + 0x88], xmm0
movups xmm0, xmmword [rsp + 0x26]
movups xmmword [rsp + 0x98], xmm0
add rsp, 0x78
pop rbp
ret
mov eax, ebx
mov ecx, 0x20
call fcn.004617c0
mov eax, esi
mov ecx, 0x20
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0047d600

Function at 0x47f0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f15d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x363543afaf30c348
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x353c
movabs rdx, 0x503030104040805
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8050800
xor eax, eax
jmp 0x47f100
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x47f12d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47f150
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x47f0e3
jmp 0x47f144
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004617c0
mov eax, edi
mov ecx, 0xa
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.0047f0a0
Function at 0x47f540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f612
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfc37c9f9d69cda33
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x35c63605fefc37c9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50802030b040301
mov qword [rsp + 0x28], rdx
movabs rdx, 0x707010401030809
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47f5ac
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x47f5de
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x47f605
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0xd
jb 0x47f592
jmp 0x47f5f5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.004617c0
mov eax, edi
mov ecx, 0xd
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0047f540

Function at 0x47fe60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ff4a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x340736040d05d0df
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa3340736040d05d0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x26f68c02220a3537
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf000f0f08040e0f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0b0b010f000f0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100c030f06020402
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47feed
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x47ff1a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47ff3d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x47fed0
jmp 0x47ff31
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004617c0
mov eax, edi
mov ecx, 0x11
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0047fe60
Function at 0x480640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48073b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x32d855eeb28c3733
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7e66876b32d855ee
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9932369e3431fd39
mov qword [rsp + 0x26], rdx
movabs rdx, 0x304040c1006090d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x13060b040b090c03
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60a13060b040b09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5100302080c1002
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4806d9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x48070b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x48072e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x14
jb 0x4806bf
jmp 0x480722
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004617c0
mov eax, edi
mov ecx, 0x14
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.00480640

Function at 0x480ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480cac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x85c5e80cc7fae4ab
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9b0bf6eef936f085
mov qword [rsp + 0x26], rdx
movabs rdx, 0x35ba0030f338bcf5
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x301010e0d040100
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe0301010e0d04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x212150410030607
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3060708040f1514
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5030514010b0a0c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x480c48
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x480c7c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x480c9f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x17
jb 0x480c2e
jmp 0x480c93
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044c4e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004617c0
mov eax, edi
mov ecx, 0x17
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00480ba0
Function at 0x480cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480dbb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3be984db99ad31d8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80349ce3e9f69031
mov qword [rsp + 0x26], rdx
movabs rdx, 0x35e0cf33a03434db
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x50309071305020a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60c090d05161007
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb0a060c090d0516
mov qword [rsp + 0x40], rdx
movabs rdx, 0x409090f0d150013
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x480d59
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1a
jge 0x480d8b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x480dae
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x18
jb 0x480d3f
jmp 0x480da2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004617c0
mov eax, edi
mov ecx, 0x18
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.00480cc0

Function at 0x481aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481ba8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5f395f39b6453831
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xca73bc065335d030
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe075b9d7ca73bc06
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3532d2d11e30d0d0
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1111150f0c0b050d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd170703180e0203
mov qword [rsp + 0x42], rdx
movabs rdx, 0xb0d0b1210030d17
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1218090c0b131419
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x481b4b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x481b78
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x481b9b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x481b2e
jmp 0x481b8f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044c4e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.004617c0
mov eax, edi
mov ecx, 0x1c
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00481aa0
Function at 0x482240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48235a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x33d94a3869d23190
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7e5f5bb54e3237e9
mov qword [rsp + 0x21], rdx
movabs rdx, 0x806f65704839a57e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb1717038985e7157
mov qword [rsp + 0x30], rdx
movabs rdx, 0x131d00101e100c08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf1e1c1502140615
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3081a160e14030c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160b0d120d180e10
mov qword [rsp + 0x50], rdx
movabs rdx, 0x17100b1a051e1c19
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4822f7
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x28
jge 0x482329
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x48234d
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x1f
jb 0x4822dd
jmp 0x482341
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.0044c4e0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1f
call fcn.004617c0
mov eax, edi
mov ecx, 0x1f
call fcn.004617c0
nop
call fcn.0045f540
nop
jmp fcn.00482240
Function at 0x48bb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x48bce7
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x52b96e0c7317ff85
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc26edb3be9f6de25
mov qword [rsp + 0x22], rdx
movabs rdx, 0x256f746e84f71366
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6547fe61bd7392d6
mov qword [rsp + 0x32], rdx
movabs rdx, 0x14e3ffae75dbd790
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x79c0cb6fda748270
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1321080b22272f2b
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x104182820001321
mov qword [rsp + 0x50], rdx
movabs rdx, 0x12022b0221252604
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa0f03210f1d0200
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc0a0c11181e0708
mov qword [rsp + 0x68], rdx
movabs rdx, 0x3070d2d21162007
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2624292b2b171d08
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2e0b2b1920160900
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1b111206180819
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x48bc80
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x46
jge 0x48bcb2
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x48bcda
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x30
jb 0x48bc65
jmp 0x48bcce
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x30
nop
call fcn.0044c4e0
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x30
call fcn.004617c0
mov eax, edi
mov ecx, 0x30
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0048bb60
Function at 0x4963a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49645d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbb6166b28587ab49
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xaf
movabs rdx, 0x703020104010208
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x496400
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x49642d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x496450
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4963e2
jmp 0x496444
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004617c0
mov eax, edi
mov ecx, 9
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004963a0

Function at 0x496de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x496edb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x75706d37275b0670
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc4cde788d3c1aa74
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7465bbda66d8206b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x150e0b0212010901
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4090c0b12140d0d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x30404090c0b1214
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0a090f0304090c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x496e79
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1a
jge 0x496eab
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x496ece
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0x18
jb 0x496e5f
jmp 0x496ec2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004617c0
mov eax, edi
mov ecx, 0x18
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.00496de0
Function at 0x498560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498626
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3a74d3dde1e42d91
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x20
movabs rdx, 0x102000400040103
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x10005
xor eax, eax
nop
jmp 0x4985c0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4985f2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x498617
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 9
jb 0x4985a2
jmp 0x49860b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004617c0
mov eax, edi
mov ecx, 9
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00498560

Function at 0x498dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x498f2c
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x3a8f63656c8359ae
mov qword [rsp + 0x19], rdx
movabs rdx, 0xac97720874a16920
mov qword [rsp + 0x21], rdx
movabs rdx, 0x800da3206cac9772
mov qword [rsp + 0x26], rdx
movabs rdx, 0x83814041433a72a5
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x687f7ea66487706c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa5523948c1857d6f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe2c14201b222821
mov qword [rsp + 0x46], rdx
movabs rdx, 0xa2b202614211b
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1214000a2b202614
mov qword [rsp + 0x50], rdx
movabs rdx, 0x150a132801220f1c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x28181c1f27260a06
mov qword [rsp + 0x60], rdx
movabs rdx, 0x192a232828020e1b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2a021e26201e1e0c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x19291e1e221a2b12
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x498ec7
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x3a
jge 0x498efc
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x498f1f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x47]
cmp rsi, 0x2d
jb 0x498ead
jmp 0x498f13
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.0044c4e0
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.004617c0
mov eax, edi
mov ecx, 0x2d
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00498dc0
Function at 0x498f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49900c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1774631e1ae1c5b7
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4022751b61561774
mov qword [rsp + 0x20], rdx
movabs rdx, 0x102000400000d02
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2020c0a03030107
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x498faf
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x5c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x5c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x498fdc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x498fff
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x498f92
jmp 0x498ff3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004617c0
mov eax, edi
mov ecx, 0xe
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00498f40

Function at 0x499aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x499bd8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x3a74266554667117
mov qword [rsp + 0x19], rdx
movabs rdx, 0x22176280043a7426
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3cf7740b6f7980ab
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb5fc2d6e0e6e160f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xfc65250174a2636e
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0b1b211c0a160e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x130e1c1f24030500
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1f22130e1c1f2403
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130d0a180a1c0122
mov qword [rsp + 0x50], rdx
movabs rdx, 0x151422011118181f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x150816221b240908
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x499b75
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x499ba8
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x499bcb
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
nop
cmp rsi, 0x25
jb 0x499b5b
jmp 0x499bbf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.0044c4e0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.004617c0
mov eax, edi
mov ecx, 0x25
call fcn.004617c0
nop
call fcn.0045f540
nop dword [rax]
jmp fcn.00499aa0
Function at 0x49af00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x49b09b
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0x8374db37faa389dc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e729c74e483c583
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1a6f9002ebd72008
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6f6c5efd6e69fb3a
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb8f93309cd75df34
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3d093e1c6b2bcfe9
mov qword [rsp + 0x44], rdx
movabs rdx, 0xf0fa8a441bed02b7
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x34002b2f1c200c13
mov qword [rsp + 0x54], rdx
movabs rdx, 0x2d23101634002b2f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1400011330321e0f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x252b0f2c290a0227
mov qword [rsp + 0x68], rdx
movabs rdx, 0x900031b1f180834
mov qword [rsp + 0x70], rdx
movabs rdx, 0x203331040535312e
mov qword [rsp + 0x78], rdx
movabs rdx, 0xa0813242c221300
mov qword [rsp + 0x80], rdx
movabs rdx, 0x718312834360511
mov qword [rsp + 0x88], rdx
movabs rdx, 0x121320033622260f
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x49b031
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x44
jge 0x49b068
movzx edx, byte [rsp + rax + 0x54]
movzx esi, byte [rsp + rax + 0x55]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x49b08e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
nop dword [rax + rax]
cmp rsi, 0x37
jb 0x49b017
jmp 0x49b082
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x37
call fcn.0044c4e0
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.004617c0
mov eax, edi
mov ecx, 0x37
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.0049af00