joyce8/EMBER2024-capa huggingface dataset:
Function at 0x478d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478e5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb820c57522dc01d9
mov qword [rsp + 0x38], rdx
movabs rdx, 0x95d573ea61e3d11c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5de3e072506f9565
mov qword [rsp + 0x48], rdx
movabs rdx, 0x403080f010e0e08
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x110e080e15090705
mov qword [rsp + 0x22], rdx
movabs rdx, 0x170c04000f00110e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc02160a13020208
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x478e00
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x478e2d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x478e50
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x478ddf
jmp 0x478e44
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00440dc0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451500
mov eax, edi
mov ecx, 0x18
call fcn.00451500
nop
nop dword [rax]
call fcn.0044f280
jmp fcn.00478d60

Function at 0x478e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478f6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa9856512fd8b2f64
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3874eaa9856512fd
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8a746572dc737ba3
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0211120c040401
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x303070a0601110e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x12040108060b0c02
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x478f0a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x478f3c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x478f5f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0x13
jb 0x478ef0
jmp 0x478f53
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451500
mov eax, edi
mov ecx, 0x13
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.00478e80
Function at 0x47bc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47bd2c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8cf91d752c046f34
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xf8472e3644de1339
mov qword [rsp + 0x47], rdx
movabs rdx, 0x9df8472e3644de13
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2073ad723b642324
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb00050016001818
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf0e051002061403
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd060c0c08081205
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xa11070a09121810
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x47bcc8
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x19]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x20
jge 0x47bcfc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x47bd1f
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x19]
cmp rsi, 0x19
jb 0x47bcae
jmp 0x47bd13
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00440dc0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451500
mov eax, edi
mov ecx, 0x19
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.0047bc20

Function at 0x47cf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d03d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6c6f63c90b952ed5
mov qword [rsp + 0x42], rdx
movabs rdx, 0x3920676c6f727731
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x6f29d4cff2373920
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd3b80763da8f69cb
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b1c141716010811
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x141c03120c081b1c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1104000f10130412
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1c1c191c10191d16
mov qword [rsp + 0x32], rdx
movabs rdx, 0x21311001817000c
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x47cfe0
movzx r9d, byte [rsp + rsi + 0x42]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x42], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x47d00d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x47d030
movzx r8d, byte [rsp + rdi + 0x42]
sub r8d, edx
cmp rsi, 0x1e
jb 0x47cfbd
jmp 0x47d024
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.00440dc0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451500
mov eax, edi
mov ecx, 0x1e
call fcn.00451500
nop
nop dword [rax]
call fcn.0044f280
jmp fcn.0047cf20
Function at 0x47db40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x47dcb2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0xd3758060e87b6e26
mov qword [rsp + 0x5d], rdx
movabs rdx, 0x74171a1ce9648974
mov qword [rsp + 0x65], rdx
movabs rdx, 0x5bce6574171a1ce9
mov qword [rsp + 0x68], rdx
movabs rdx, 0x6f2c1efaffd3d014
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1fe03999db6d7175
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2b652aae460b4ebc
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2520251c130e1d26
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50317000b021513
mov qword [rsp + 0x27], rdx
movabs rdx, 0x2711000422180503
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x240d271900091e1f
mov qword [rsp + 0x35], rdx
movabs rdx, 0x152604231525041d
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xe0b120e21171100
mov qword [rsp + 0x45], rdx
movabs rdx, 0x30704152a0c0d21
mov qword [rsp + 0x4d], rdx
movabs rdx, 0xd16161428032112
mov qword [rsp + 0x55], rdx
xor eax, eax
jmp 0x47dc50
movzx r9d, byte [rsp + rsi + 0x5d]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x5d], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x5d], dl
add rax, 2
cmp rax, 0x3e
jge 0x47dc7d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x47dca5
movzx r8d, byte [rsp + rdi + 0x5d]
sub r8d, edx
cmp rsi, 0x2b
jb 0x47dc33
jmp 0x47dc97
xor eax, eax
lea rbx, [rsp + 0x5d]
mov ecx, 0x2b
call fcn.00440dc0
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
nop
call fcn.00451500
mov eax, edi
mov ecx, 0x2b
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.0047db40

Function at 0x47f660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f768
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe5e897d06bac6f73
mov qword [rsp + 0x37], rdx
movabs rdx, 0x20f70fb7ce6570bc
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xa720f70fb7ce6570
mov qword [rsp + 0x40], rdx
movabs rdx, 0xcb6574726fe453d8
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120b180610081313
mov qword [rsp + 0x19], rdx
movabs rdx, 0x10180d05110e0713
mov qword [rsp + 0x21], rdx
movabs rdx, 0x130c101210041018
mov qword [rsp + 0x27], rdx
movabs rdx, 0x11070604020e0705
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x47f70b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1e
jge 0x47f738
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x47f75b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x47f6ee
jmp 0x47f74f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00440dc0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451500
mov eax, edi
mov ecx, 0x19
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.0047f660
Function at 0x480b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480c8c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x72d0e7d6c8bf74c6
mov qword [rsp + 0x40], rdx
movabs rdx, 0xdecfa78d2e9021ca
mov qword [rsp + 0x48], rdx
movabs rdx, 0x192f691d1745c3a8
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6080e140c051208
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x130906080e140c05
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe1103160b050f0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40b170916050c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1303100d020b0305
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x480c28
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x480c5c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x480c7f
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x18
jb 0x480c0e
jmp 0x480c73
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00440dc0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451500
mov eax, edi
mov ecx, 0x18
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.00480b80

Function at 0x4832c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483387
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2970a6002f6870eb
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x2fad6421
movabs rdx, 0xa04000805080a0a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa04030b00070a04
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x483328
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x483357
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x48337a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x48330b
jmp 0x48336e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00440dc0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451500
mov eax, edi
mov ecx, 0xc
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004832c0
Function at 0x4852a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48537d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x484c474a70594060
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x694f646e285d484c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90c020708010604
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc090c02070801
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x10c0d0707020c04
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x485320
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x48534d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x485370
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x485302
jmp 0x485364
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00440dc0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451500
mov eax, edi
mov ecx, 0xe
call fcn.00451500
nop
nop dword [rax]
call fcn.0044f280
jmp fcn.004852a0

Function at 0x4855a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48568a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x12e7056fc67469a2
mov qword [rsp + 0x35], rdx
movabs rdx, 0xae054912e7056fc6
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf3aac0da0018fef2
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0012030e0b0c05
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x10a120f00110710
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd070912090a0006
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x48562d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jge 0x48565a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x48567d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x485610
jmp 0x485671
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451500
mov eax, edi
mov ecx, 0x13
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004855a0
Function at 0x4856a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48579b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3d734752b6f141a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x132003d734752b6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2b65de22744f332f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0c0c0d11090d0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd0c0f0b0c0f0a05
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30c0d0c0f0b0c0f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x708030e010306
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x485739
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x48576b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x48578e
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x12
jb 0x48571f
jmp 0x485782
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451500
mov eax, edi
mov ecx, 0x12
call fcn.00451500
nop
nop dword [rax + rax]
call fcn.0044f280
jmp fcn.004856a0

Function at 0x4860e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4861a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4d3d436cca49f942
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x7965224d
movabs rdx, 0x602030000010705
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x8080800
xor eax, eax
jmp 0x486140
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x486172
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x486197
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0xb
jb 0x486124
jmp 0x48618b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451500
mov eax, edi
mov ecx, 0xb
nop
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004860e0
Function at 0x4861c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486292
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcc03fb6e450f6552
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xbf23143ec3cc03fb
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50708020c060709
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x90b0a0506020507
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x48622c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x48625e
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x486285
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0xd
jb 0x486212
jmp 0x486275
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00440dc0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00451500
mov eax, edi
mov ecx, 0xd
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004861c0

Function at 0x48a5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a6cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe196c0406165b343
mov qword [rsp + 0x36], rdx
movabs rdx, 0x86b2e196c0406165
mov qword [rsp + 0x38], rdx
movabs rdx, 0x908fb4f484ba61ae
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0f0c0406060501
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80a0c080f070c09
mov qword [rsp + 0x26], rdx
movabs rdx, 0x100d0a0d0f11090f
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x48a66a
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x48a69c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x48a6bf
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x12
jb 0x48a650
jmp 0x48a6b3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451500
mov eax, edi
mov ecx, 0x12
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.0048a5e0
Function at 0x48b8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b9ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1801ea5022651543
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4144703765686c2b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2f5568dfd8323546
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8140c0717110508
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe120c1401101213
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4160310080f0306
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x48b96d
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x48b99a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x48b9bd
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x48b950
jmp 0x48b9b1
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451500
mov eax, edi
mov ecx, 0x18
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.0048b8e0

Function at 0x48e940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ea3b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x436469585b11374a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x696f436469585b11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x363b495829451265
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0c000b0209030f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4000e1004010901
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0304000e100401
mov qword [rsp + 0x26], rdx
movabs rdx, 0x11090c0c0b040606
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x48e9d9
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x48ea0b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x48ea2e
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0x12
jb 0x48e9bf
jmp 0x48ea22
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451500
mov eax, edi
mov ecx, 0x12
call fcn.00451500
nop
nop dword [rax + rax]
call fcn.0044f280
jmp fcn.0048e940
Function at 0x48f840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f8fe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe7e47561a4746547
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xd2817204
movabs rdx, 0x507030a0b070b08
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x80b060b
xor eax, eax
jmp 0x48f8a1
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x48f8ce
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x48f8f1
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x48f884
jmp 0x48f8e5
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451500
mov eax, edi
mov ecx, 0xc
call fcn.00451500
nop
nop
call fcn.0044f280
jmp fcn.0048f840

Function at 0x490dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x490e9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd19acd74deb92eff
mov qword [rsp + 0x31], rdx
movabs rdx, 0xd80b1f6e497037d1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x702060705070300
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe0d070206070507
mov qword [rsp + 0x21], rdx
movabs rdx, 0x20800070c05010d
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x490e40
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x490e6d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x490e90
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x490e22
jmp 0x490e84
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00440dc0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451500
mov eax, edi
mov ecx, 0xf
call fcn.00451500
nop
nop dword [rax]
call fcn.0044f280
jmp fcn.00490dc0
Function at 0x491140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49123b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6520cd79838a6534
mov qword [rsp + 0x39], rdx
movabs rdx, 0x73ce656db435ba65
mov qword [rsp + 0x40], rdx
movabs rdx, 0xdb6669542f2469ca
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60916050f021103
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6150f0a120f0015
mov qword [rsp + 0x25], rdx
movabs rdx, 0x903081206150f0a
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1111000d020200
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4911d9
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x49120b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x49122e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x17
jb 0x4911bf
jmp 0x491222
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00440dc0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451500
mov eax, edi
mov ecx, 0x17
call fcn.00451500
nop
nop dword [rax + rax]
call fcn.0044f280
jmp fcn.00491140

Function at 0x492800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4928c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb16c9cdb3f8c6fbe
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x4a
movabs rdx, 0x507030708050308
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x20204
xor eax, eax
nop
jmp 0x492860
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x492892
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4928b7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 9
jb 0x492842
jmp 0x4928ab
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451500
mov eax, edi
mov ecx, 9
nop
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.00492800