joyce8/EMBER2024-capa huggingface dataset:
Function at 0x489ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489bcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4fbcfacf209650c
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6c154304fbcfacf2
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9f65d17903966508
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90809080012100e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb050700040908
mov qword [rsp + 0x25], rdx
movabs rdx, 0x6020903090d0808
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x489b6a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x16
jge 0x489b9c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x489bbf
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0x13
jb 0x489b50
jmp 0x489bb3
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00489ae0

Function at 0x489be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489d38
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x931120389b1473d4
mov qword [rsp + 0x4f], rdx
movabs rdx, 0xf16e816f26209f6c
mov qword [rsp + 0x57], rdx
movabs rdx, 0x65f16e816f26209f
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa7204d7ad2022a89
mov qword [rsp + 0x60], rdx
movabs rdx, 0xdfba69539e2d639c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x9c75e089ce8e7247
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1a28231626240406
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1f0b1a2823162624
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf13202012210018
mov qword [rsp + 0x27], rdx
movabs rdx, 0x21c131415280721
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1120250d1d030406
mov qword [rsp + 0x37], rdx
movabs rdx, 0x707091901241f1c
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x1f1c18041c0f0713
mov qword [rsp + 0x47], rdx
xor eax, eax
jmp 0x489cd3
movzx r9d, byte [rsp + rsi + 0x4f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x4f], dl
mov byte [rsp + rsi + 0x4f], r8b
add rax, 2
cmp rax, 0x32
jge 0x489d08
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x489d2b
movzx r8d, byte [rsp + rdi + 0x4f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
nop dword [rax]
cmp rsi, 0x29
jb 0x489cb9
jmp 0x489d1f
xor eax, eax
lea rbx, [rsp + 0x4f]
mov ecx, 0x29
call fcn.0044d280
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00462ca0
mov eax, edi
mov ecx, 0x29
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.00489be0
Function at 0x489e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489f0c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfdaaf0616bf401e8
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x64e283fd
movabs rdx, 0x306030701050208
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x600090207070a06
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x489ea5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x489edc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x489eff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0xb
jb 0x489e8b
jmp 0x489ef3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00489e40

Function at 0x489f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x489fe6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xec2720e4e176e969
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6e
movabs rdx, 0x506010103050704
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x401
xor eax, eax
nop
jmp 0x489f80
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x489fb2
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x489fd7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 9
jb 0x489f62
jmp 0x489fcb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00489f20

Function at 0x48c0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c187
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x63622074453f5c5a
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x3365595c
movabs rdx, 0x70b0900030208
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb07010809080007
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x48c128
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x48c157
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x48c17a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x48c10b
jmp 0x48c16e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.0048c0c0
Function at 0x497f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49805b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x676e7b68f06f68e1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x95207721db6f70fa
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6ef107e86da1f87e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5130c05130d0f16
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1016110412081315
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc03160116121016
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb161612140d1100
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x497ff9
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1e
jge 0x49802b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49804e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x18
jb 0x497fdf
jmp 0x498042
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462ca0
mov eax, edi
mov ecx, 0x18
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.00497f60

Function at 0x498280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49834c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3e48fe5d54616865
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x6148513e
movabs rdx, 0xa0508000a05070a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x906040101030000
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4982e5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x49831c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x49833f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0xb
jb 0x4982cb
jmp 0x498333
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00498280
Function at 0x498360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49842c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3226b8692572f832
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xf5f9
movabs rdx, 0x109050606080101
mov qword [rsp + 0x18], rdx
movabs rdx, 0x700030103060109
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x4983c4
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xe
jge 0x4983fc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x49841f
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
cmp rsi, 0xa
jb 0x4983aa
jmp 0x498413
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00498360

Function at 0x498440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49853b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbe72ef343339531
mov qword [rsp + 0x36], rdx
movabs rdx, 0xcc9a0be72ef34333
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe131ea9097a197ed
mov qword [rsp + 0x40], rdx
movabs rdx, 0x711010604040d0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe080f0c03080a08
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf110e080f0c0308
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10f0c0e07040109
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4984d9
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x49850b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x49852e
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
cmp rsi, 0x12
jb 0x4984bf
jmp 0x498522
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.00498440
Function at 0x498560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x775c748c2274d156
mov qword [rsp + 0x28], rdx
movabs rdx, 0x300030206030601
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x706
xor eax, eax
jmp 0x4985b4
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x4985e8
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x498625
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x7a]
nop dword [rax + rax]
cmp rbx, 8
jb 0x49859a
jmp 0x498617
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x498601
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x4985f5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00462ca0
mov eax, esi
mov ecx, 8
call fcn.00462ca0
nop
int3

Function at 0x498640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49872c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6d7369857057566d
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x746d736985705756
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6c71746e654a206e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb05080e100b0e04
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6070b010b05080e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x31002060f100b
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4986ca
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x4986fc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x49871f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x11
jb 0x4986b0
jmp 0x498713
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00498640
Function at 0x498880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49895d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7c8427696a72646a
mov qword [rsp + 0x31], rdx
movabs rdx, 0x77737272735d7e7c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x509030804040a09
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8050903080404
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe0d03070207060d
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x498900
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x49892d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x498950
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4988e2
jmp 0x498944
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00498880

Function at 0x498c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498cfd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2064546c51766e67
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60675869684b5f5a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0c0f050d060305
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80c0a0c0f050d06
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90a060c0803000f
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x498ca0
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x498ccd
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x498cf0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x498c82
jmp 0x498ce4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462ca0
mov eax, edi
mov ecx, 0x10
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00498c20
Function at 0x498d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498e3d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x965517b57470f66
mov qword [rsp + 0x44], rdx
movabs rdx, 0x50546e74dd0a4554
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x5c11025a50546e74
mov qword [rsp + 0x50], rdx
movabs rdx, 0x652768615c6fcb61
mov qword [rsp + 0x58], rdx
movabs rdx, 0x18071112010b010a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1103120115110a17
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf03150e01020513
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1517190d100d0809
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb051816100a041a
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x498de0
movzx r9d, byte [rsp + rsi + 0x44]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x44], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x44], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x498e0d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x498e30
movzx r8d, byte [rsp + rdi + 0x44]
sub r8d, edx
cmp rsi, 0x1c
jb 0x498dbd
jmp 0x498e24
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1c
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00498d20

Function at 0x498e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x498f7d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x293e466c610f3a39
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x58c3663d40664a3d
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd66458c3663d4066
mov qword [rsp + 0x48], rdx
movabs rdx, 0x723568706972554b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x501111102050e0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6050111110205
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x90807111318130c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0b0a13120a1111
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0d130d170f0f17
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x498f20
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x498f4d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x498f70
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x498efd
jmp 0x498f64
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.00498e60
Function at 0x498fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49905e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4b50300d3d763669
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xf7046c41
movabs rdx, 0xb07010a05050104
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x6080103
xor eax, eax
jmp 0x499001
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x49902e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x499051
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x498fe4
jmp 0x499045
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
nop
call fcn.004609c0
jmp fcn.00498fa0

Function at 0x499080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49919a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20ae6529bd61689c
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xc10b72f062291de2
mov qword [rsp + 0x45], rdx
movabs rdx, 0x97dfcec10b72f062
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65e61a61d1c5e16f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x121419190408040c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1211160f12141919
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf0609040a0f1011
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1019140618161514
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x30e0f1914110019
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x499137
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x24
jge 0x499169
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x49918d
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x1b
jb 0x49911d
jmp 0x499181
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.0044d280
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1b
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.00499080
Function at 0x499520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4995ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x56006461c1c305b3
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x6ef80756
movabs rdx, 0xa03020102090907
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2070707080006
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x499585
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4995bc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4995df
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0xb
jb 0x49956b
jmp 0x4995d3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00499520

Function at 0x499600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4996e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x536f5b20635a564b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x426072366c20536f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x101010a00050502
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0c0d010101010a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70c0102030a05
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x499680
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4996b2
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4996d7
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 0xe
jb 0x499662
jmp 0x4996cb
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462ca0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.00499600