joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47b340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b3fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8c89b3b6699dd242
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x69
movabs rdx, 0x701050704070501
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x206
xor eax, eax
nop
jmp 0x47b3a0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x47b3cd
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47b3f0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x47b382
jmp 0x47b3e4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456860
mov eax, edi
mov ecx, 9
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.0047b340

Function at 0x47b420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b4d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f09dc0c3170d62d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x501010104050105
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x4030006
xor eax, eax
jmp 0x47b476
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x47b4a8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47b4cb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 8
jb 0x47b45c
jmp 0x47b4bf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00456860
mov eax, edi
mov ecx, 8
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.0047b420

Function at 0x47d700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d7b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x63dc678bbc92948e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5040206000301
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x105
xor eax, eax
jmp 0x47d755
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x47d788
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47d7ab
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
nop
cmp rsi, 8
jb 0x47d73b
jmp 0x47d79f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00456860
mov eax, edi
mov ecx, 8
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.0047d700
Function at 0x47dfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e072
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x424d70605f6e755a
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x5d5e635247424d70
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b00070505060c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30a0a0c09040a0b
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x47e00c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x47e03e
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x47e065
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 0xd
jb 0x47dff2
jmp 0x47e055
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00456860
mov eax, edi
mov ecx, 0xd
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0047dfa0

Function at 0x481a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481add
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe469a7a094d3659b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xcc767ff708aad2ad
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0f03020c0c02
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x40509020b05000d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8030a0c04020c07
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x481a80
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x481aad
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x481ad0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x481a62
jmp 0x481ac4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456860
mov eax, edi
mov ecx, 0x10
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.00481a00
Function at 0x481e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481f26
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7a76617461ae6580
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x84
movabs rdx, 0x607010000080208
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x102
xor eax, eax
nop
jmp 0x481ec0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x481ef2
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x481f17
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
cmp rsi, 9
jb 0x481ea2
jmp 0x481f0b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456860
mov eax, edi
mov ecx, 9
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.00481e60

Function at 0x482360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48244a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xecef65f4dbfefa90
mov qword [rsp + 0x32], rdx
movabs rdx, 0x688f8cf8e8d9ecef
mov qword [rsp + 0x38], rdx
movabs rdx, 0xab0f6f08485fdd76
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0715040e000b0f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf120a070604140e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x102020603000908
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4823ed
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jge 0x48241a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x48243d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4823d0
jmp 0x482431
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456860
mov eax, edi
mov ecx, 0x16
call fcn.00456860
nop
call fcn.00454580
jmp fcn.00482360

Function at 0x482460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x482518
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x696b3ba9bdba6c4f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x302030203050204
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x202
xor eax, eax
jmp 0x4824b8
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x4824e8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x48250b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x48249b
jmp 0x4824ff
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00456860
mov eax, edi
mov ecx, 8
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.00482460
Function at 0x483340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4833fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x938e8aa25f648371
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x63bb
movabs rdx, 0x706080408040105
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0
xor eax, eax
jmp 0x4833a0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4833cd
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4833f0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x483382
jmp 0x4833e4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456860
mov eax, edi
mov ecx, 0xa
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.00483340
Function at 0x4881a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488267
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x786163726f664278
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7b6f
movabs rdx, 0x100030203090802
mov qword [rsp + 0x18], rdx
movabs rdx, 0x702090401090100
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x488207
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x488237
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x48825a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4881ea
jmp 0x48824e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456860
mov eax, edi
mov ecx, 0xa
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004881a0

Function at 0x488280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488346
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69c19fdcdd93a1ae
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xb8
movabs rdx, 0x608000403050804
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x2080105
xor eax, eax
nop
jmp 0x4882e0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x488312
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x488337
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
cmp rsi, 9
jb 0x4882c2
jmp 0x48832b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456860
mov eax, edi
mov ecx, 9
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.00488280

Function at 0x488680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488746
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa4e869d8c1789948
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xba
movabs rdx, 0x403060603030808
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x3010706
xor eax, eax
nop
jmp 0x4886e0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x488712
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x488737
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 9
jb 0x4886c2
jmp 0x48872b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456860
mov eax, edi
mov ecx, 9
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.00488680
Function at 0x488760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48885d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x456ed7dbab2c17bb
mov qword [rsp + 0x35], rdx
movabs rdx, 0xfa79f6456ed7dbab
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf6a340cd15b8d0bb
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1111020e02020b03
mov qword [rsp + 0x19], rdx
movabs rdx, 0x111011010c051007
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2000f0711101101
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa040a1008120d01
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x488800
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x48882d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x488850
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4887df
jmp 0x488844
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456860
mov eax, edi
mov ecx, 0x13
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.00488760

Function at 0x488bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488c7e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4f35725549385b51
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x633e324f
movabs rdx, 0x603080009040602
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x2040701
xor eax, eax
jmp 0x488c21
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x488c4e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x488c71
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x488c04
jmp 0x488c65
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456860
mov eax, edi
mov ecx, 0xb
call fcn.00456860
nop
nop
call fcn.00454580
jmp fcn.00488bc0
Function at 0x488ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488d67
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa274d25fd3d16f99
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6ccfd278
movabs rdx, 0x802080509030006
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3070809080a0802
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x488d08
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x488d37
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x488d5a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x488ceb
jmp 0x488d4e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456860
mov eax, edi
mov ecx, 0xc
call fcn.00456860
nop
call fcn.00454580
jmp fcn.00488ca0

Function at 0x488d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488e7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5f10c3de3631c1d3
mov qword [rsp + 0x39], rdx
movabs rdx, 0x2da4aed30ee3145f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xca6fe43e3fd263e7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60813000a130b16
mov qword [rsp + 0x19], rdx
movabs rdx, 0x10306050c12080d
mov qword [rsp + 0x21], rdx
movabs rdx, 0xf0a0c0e0f121102
mov qword [rsp + 0x29], rdx
movabs rdx, 0x9110c040e111401
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x488e20
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x488e4d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x488e70
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x488dff
jmp 0x488e64
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456860
mov eax, edi
mov ecx, 0x17
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.00488d80
Function at 0x48b180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b27b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5f330e6532744a57
mov qword [rsp + 0x35], rdx
movabs rdx, 0x5a100c5f330e6532
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5e4744635b21195f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x811031201030c11
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa0a0f0f0e060001
mov qword [rsp + 0x21], rdx
movabs rdx, 0x11000d000a0a0f0f
mov qword [rsp + 0x25], rdx
movabs rdx, 0x90e100509050b0b
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x48b219
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1c
jge 0x48b24b
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x48b26e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
cmp rsi, 0x13
jb 0x48b1ff
jmp 0x48b262
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456860
mov eax, edi
mov ecx, 0x13
call fcn.00456860
nop
nop dword [rax + rax]
call fcn.00454580
jmp fcn.0048b180

Function at 0x48b820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b90a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x15e36e1b0e1c7c82
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x2115e36e1b0e1c7c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6cd96e146d72942c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6070f00010d0a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x70d06080006070f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x904030007020201
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x48b8ad
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x48b8da
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48b8fd
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x48b890
jmp 0x48b8f1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456860
mov eax, edi
mov ecx, 0x11
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0048b820
Function at 0x48cb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48cc3e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8f53e8aae0a396a8
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xddab618f
movabs rdx, 0x10500070a050309
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x40a0902
xor eax, eax
jmp 0x48cbe1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x48cc0e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x48cc31
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x48cbc4
jmp 0x48cc25
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456860
mov eax, edi
mov ecx, 0xb
call fcn.00456860
nop
nop
call fcn.00454580
jmp fcn.0048cb80

Function at 0x48cc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48cd1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x999e698489688b49
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x8d
movabs rdx, 0x701030706030401
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x3060804
xor eax, eax
nop
jmp 0x48ccc0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x48cced
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48cd10
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x48cca2
jmp 0x48cd04
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456860
mov eax, edi
mov ecx, 9
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.0048cc60

Function at 0x4910c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x491186
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x93a4bc729d7494a7
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x86
movabs rdx, 0x7070501030806
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x807
xor eax, eax
nop
jmp 0x491120
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x491152
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x491177
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x33]
cmp rsi, 9
jb 0x491102
jmp 0x49116b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456860
mov eax, edi
mov ecx, 9
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004910c0