joyce8/EMBER2024-capa huggingface dataset:
Function at 0x474f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474fec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xcde3e7425ffce749
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5f61fccde3e7425f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2d6ff4617263dc63
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb020d0102020206
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1070c12070b0b02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20c101008050809
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x474f8a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x474fbc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x474fdf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0x13
jb 0x474f70
jmp 0x474fd3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00474f00

Function at 0x475a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475afb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6172b9e5c76ed84e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x59ee51da3574e661
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc4a5496f50cbcfd5
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4080f040e0f140b
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb0d100a010c0b15
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x50d08100b0d100a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16050e010311050e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x475a99
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x475acb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x475aee
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
cmp rsi, 0x17
jb 0x475a7f
jmp 0x475ae2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00475a00
Function at 0x475bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475cec
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x8a807f72de9ca0a3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9e668a807f72de9c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd9b195785f748496
mov qword [rsp + 0x28], rdx
movabs rdx, 0x598bbfb662a26192
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5a7658908d5f6564
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb00031711101e09
mov qword [rsp + 0x40], rdx
movabs rdx, 0x101402121616070a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140605172003030f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa181d1101011605
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe1f152119200b16
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x475c86
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x28
jge 0x475cbc
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x475cdf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0x22
jb 0x475c6c
jmp 0x475cd3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00461020
mov eax, edi
mov ecx, 0x22
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00475bc0

Function at 0x476a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476bac
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x5864e10e7d65b350
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1f6163b367febcf5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6bc6ee11f6163b3
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc77261d9a2af3b8f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10c010515120f09
mov qword [rsp + 0x36], rdx
movabs rdx, 0x412151617140f01
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc05041215161714
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50b131509071214
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10071b0a030a0f04
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1809170504140808
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x476b46
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2a
jge 0x476b7c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1c
jae 0x476b9f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
cmp rsi, 0x1c
jb 0x476b2c
jmp 0x476b93
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00476a80
Function at 0x477940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4779fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8382987289710df2
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x64
movabs rdx, 0x506070200030607
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060007
xor eax, eax
nop
jmp 0x4779a0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4779cd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4779f0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x477982
jmp 0x4779e4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00477940
Function at 0x484380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48447b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x34f730f538f5f432
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe10438202436e334
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2832ec010538081d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x81216060b14060b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10f0a0213041202
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe131404010f0a02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80a0f12100b0d13
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x484419
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x48444b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x48446e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 0x17
jb 0x4843ff
jmp 0x484462
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00484380

Function at 0x486a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486b38
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xa0a29fbd31149228
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3da0a29fbd311492
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x16253024a4283508
mov qword [rsp + 0x24], rdx
movabs rdx, 0x351632ad9c373137
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3522adfa8eae3982
mov qword [rsp + 0x34], rdx
movabs rdx, 0x191d191708140f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1a081c1c101d1d09
mov qword [rsp + 0x44], rdx
movabs rdx, 0xd1502011a081c1c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f0b18020506070c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d1b0b0b181e1f15
mov qword [rsp + 0x58], rdx
movabs rdx, 0x201140419091708
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x486ad8
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x2c
jge 0x486b08
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x486b2b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x486abb
jmp 0x486b1f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00461020
mov eax, edi
mov ecx, 0x21
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00486a00
Function at 0x487040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487178
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x1dc1bee5c2354113
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd6dd1dc1bee5c235
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x323951b23530e3dc
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5e31a7bcc3bed3cd
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb1c2bf30393f5733
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb0f000409192006
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa081c0304040f15
mov qword [rsp + 0x44], rdx
movabs rdx, 0x914051b0a081c03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1312001f01052107
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb1521051604000f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x170e1f151f030f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x487115
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2c
jge 0x487148
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x48716b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
nop
cmp rsi, 0x22
jb 0x4870fb
jmp 0x48715f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00461020
mov eax, edi
mov ecx, 0x22
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00487040
Function at 0x487720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487858
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x9196c0aceb349de9
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x64ee38989196c0ac
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x36310b8c36f53630
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd83736d132a034aa
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x72328a383233ae33
mov qword [rsp + 0x36], rdx
movabs rdx, 0x231d111405161805
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1b07100b0a001403
mov qword [rsp + 0x46], rdx
movabs rdx, 0x7031b07100b0a00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d10180606110518
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa10140605100e06
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d04010821211800
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4877f8
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2a
jge 0x487828
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x48784b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x24
jb 0x4877db
jmp 0x48783f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x24
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00461020
mov eax, edi
mov ecx, 0x24
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00487720
Function at 0x48ef60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f0b8
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x62ac8f3174e71088
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa2303be76f509769
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb86f8957a2303be7
mov qword [rsp + 0x24], rdx
movabs rdx, 0xccb20b14b4c8f77
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x727475492008a69c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd367b961a85f8c6f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1e1a112b0c291b09
mov qword [rsp + 0x44], rdx
movabs rdx, 0xf14231d1e1a112b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5261a2013091501
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2729011c15180220
mov qword [rsp + 0x58], rdx
movabs rdx, 0x23180c2309252013
mov qword [rsp + 0x60], rdx
movabs rdx, 0x17231311171d0601
mov qword [rsp + 0x68], rdx
movabs rdx, 0x17101b261d0d16
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x48f053
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x34
jge 0x48f088
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x48f0ab
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
nop dword [rax]
cmp rsi, 0x2c
jb 0x48f039
jmp 0x48f09f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2c
call fcn.0044bb20
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2c
call fcn.00461020
mov eax, edi
mov ecx, 0x2c
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.0048ef60

Function at 0x48f0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f22c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x69668936746c759a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x135d5f8aa1c0b274
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc19270135d5f8aa1
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6bd8fa718b204996
mov qword [rsp + 0x30], rdx
movabs rdx, 0x208775df20899320
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3667cc324b20a47c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17191d28231c2113
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa170a1812120f1d
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf0e0b18181f1d0b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a2a060905262324
mov qword [rsp + 0x60], rdx
movabs rdx, 0x18090c1417110016
mov qword [rsp + 0x68], rdx
movabs rdx, 0x271f240916060d27
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x48f1c4
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x30
jge 0x48f1fc
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2b
jae 0x48f21f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0x2b
jb 0x48f1aa
jmp 0x48f213
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2b
call fcn.0044bb20
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
call fcn.00461020
mov eax, edi
mov ecx, 0x2b
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0048f0e0
Function at 0x48f680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f7cc
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xe2d6f7e46c4d78a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xaec8e8dafb811a9
mov qword [rsp + 0x24], rdx
movabs rdx, 0xdf881e5a9eb20361
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1bcc6765bf20f474
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8897727095ae7617
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb221f0c1f11200a
mov qword [rsp + 0x44], rdx
movabs rdx, 0x150414230b221f0c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc06130809071f02
mov qword [rsp + 0x50], rdx
movabs rdx, 0x609080a1b1e0102
mov qword [rsp + 0x58], rdx
movabs rdx, 0x190a0f07190a0c09
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1727170407160e14
mov qword [rsp + 0x68], rdx
movabs rdx, 0x130d121126000414
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x48f764
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x34
jge 0x48f79c
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x28
jae 0x48f7bf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x28
jb 0x48f74a
jmp 0x48f7b3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x28
call fcn.0044bb20
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00461020
mov eax, edi
mov ecx, 0x28
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0048f680

Function at 0x48f7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f90c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xf794cc7446767980
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x42b8baf794cc7446
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6cc855c9f0e73364
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8b688469b52064ef
mov qword [rsp + 0x30], rdx
movabs rdx, 0xbfc5e3d244cf39ad
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130d06210d1b0e0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x210e1c101822201a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x21020d1a1e1c1f00
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10081c050e020707
mov qword [rsp + 0x58], rdx
movabs rdx, 0x70e0f1609131d11
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x48f8a6
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x71]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x28
jge 0x48f8dc
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x23
jae 0x48f8ff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x71]
cmp rsi, 0x23
jb 0x48f88c
jmp 0x48f8f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00461020
mov eax, edi
mov ecx, 0x23
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0048f7e0
Function at 0x490480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x490538
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x273134d02cc26150
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x704040405020204
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x603
xor eax, eax
jmp 0x4904d5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x490508
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x49052b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
nop
cmp rsi, 8
jb 0x4904bb
jmp 0x49051f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00490480

Function at 0x4908c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49097d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x45d1bdd573c891d5
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x44
movabs rdx, 0x2020100080700
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6040005
xor eax, eax
nop
jmp 0x490920
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x49094d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x490970
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x490902
jmp 0x490964
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004908c0
Function at 0x49e0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49e1bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3970eadaa61830bd
mov qword [rsp + 0x18], rdx
movabs rdx, 0x99b9742be96465e9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1a9f2f85661d26df
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40e170f10081400
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1501161411000204
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1214110b17050311
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1710050e07120c08
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x49e160
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x49e18d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x49e1b0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x49e13f
jmp 0x49e1a4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0049e0c0

Function at 0x49ede0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49eedd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x746365fb7886d00e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xfe8320a194746365
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7006747e99548b7f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100f0d0d0e040200
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc0c080b0c021113
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x10c02110c0c080b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1109010c090e0102
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x49ee80
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x49eead
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x49eed0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x49ee5f
jmp 0x49eec4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0049ede0