joyce8/EMBER2024-capa huggingface dataset:
Function at 0x474ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474d9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc22e1b2b168913d0
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe37023e4c1c22e1b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x702c907414280269
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x12020e0604090e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa050e0e000f090a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10071213050c0a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc010f0f030e0108
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x474d39
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x33]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x474d6b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x474d8e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x33]
cmp rsi, 0x15
jb 0x474d1f
jmp 0x474d82
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.00474ca0

Function at 0x4750c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4751bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x664e64ee72dd045b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd864ea92d5664e64
mov qword [rsp + 0x24], rdx
movabs rdx, 0x51f0dc614167699b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x13090013010a0205
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd040c100114050a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x106050a0d040c10
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0c02080112140a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x475159
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x47518b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4751ae
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0x15
jb 0x47513f
jmp 0x4751a2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.004750c0
Function at 0x4754a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47558c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x663e0d2016651049
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5152306e42663e0d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3214233429675673
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x13130c05010e0e0e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0b1203120e1313
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6120008110a0810
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47552a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x47555c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x47557f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x15
jb 0x475510
jmp 0x475573
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004754a0

Function at 0x475ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475fb8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3e3b2e5a8a584c3b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3131652e4b8d4b3e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3c5e53332e6b497c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x700060202110316
mov qword [rsp + 0x36], rdx
movabs rdx, 0x160f06081001140c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1411160f06081001
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0a150415091603
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x475f56
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
mov byte [rsp + rdi + 0x1f], r9b
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x475f88
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x475fab
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x17
jb 0x475f3f
jmp 0x475f9f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.00475ec0
Function at 0x47b4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b5da
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x1b63d6a66590d5dc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x656dc267e1612d91
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9f41748c6f95e678
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8969946d9f645d66
mov qword [rsp + 0x36], rdx
movabs rdx, 0x191209070b050712
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd00191209070b05
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb1119100d050705
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1040b1d1f00171b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x802191604041d14
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x47b577
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x47b5a9
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x47b5cd
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x20
jb 0x47b55d
jmp 0x47b5c1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.0044e180
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x20
call fcn.00463f80
mov eax, edi
mov ecx, 0x20
call fcn.00463f80
nop
call fcn.00461d00
nop
jmp fcn.0047b4c0

Function at 0x47c3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c49b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x946b69749d656469
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb765946b69749d65
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x218e76169bc172c9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x307100903090e11
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd101007060d0310
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0d0d101007060d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd10060c090a060a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47c439
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x47c46b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47c48e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
cmp rsi, 0x12
jb 0x47c41f
jmp 0x47c482
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00463f80
mov eax, edi
mov ecx, 0x12
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.0047c3a0
Function at 0x47dcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ddbd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20322daf653a0f6c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x636e34734574403f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xae401d2d523605c7
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x214110b17150404
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10b080d10090410
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1505010b080d1009
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1216021509130b04
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x47dd60
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x47dd8d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x47ddb0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x47dd3f
jmp 0x47dda4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00463f80
mov eax, edi
mov ecx, 0x18
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0047dcc0
Function at 0x47e940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ea87
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x552074da6e6e2fbf
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa6ab0a9d0b552074
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9098a7ab8068959a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x97797005889047d3
mov qword [rsp + 0x34], rdx
movabs rdx, 0x796c4eb7a272a013
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1308100a0e1a041c
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1c15221308100a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a17011201120304
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1813211d200c1113
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e01001e1500111c
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe1c192114161009
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1e092221040b0d07
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x47ea27
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x34
jge 0x47ea57
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x47ea7a
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x25
jb 0x47ea0a
jmp 0x47ea6e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
call fcn.0044e180
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00463f80
mov eax, edi
mov ecx, 0x25
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0047e940

Function at 0x47f720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f80c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x796e9d81968f6f7d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9e7420796e9d8196
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x73bc6c8c99e06f89
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30a0a090a0d0205
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40b0e0c030a0a09
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf090e000d0e110d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47f7aa
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x47f7dc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x47f7ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x13
jb 0x47f790
jmp 0x47f7f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00463f80
mov eax, edi
mov ecx, 0x13
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0047f720
Function at 0x47fce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47fde8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa6f64eea58eea4e7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd1685f8c2565e2cd
mov qword [rsp + 0x25], rdx
movabs rdx, 0xdbf3d16572d1685f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd7d087ee6ce3f676
mov qword [rsp + 0x32], rdx
movabs rdx, 0x171c141b0d07170f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x41a0c08001c170b
mov qword [rsp + 0x42], rdx
movabs rdx, 0x217090d160b041a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1907041206090113
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x47fd8b
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x47fdb8
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x47fddb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x47fd6e
jmp 0x47fdcf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00463f80
mov eax, edi
mov ecx, 0x1d
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0047fce0

Function at 0x483160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48325d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2c6f29742632fa66
mov qword [rsp + 0x18], rdx
movabs rdx, 0x77d74aeb746fae20
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe1e4ed1c653f3b04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50101170e0f160c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1514120e070f1409
mov qword [rsp + 0x38], rdx
movabs rdx, 0x15170d1212101102
mov qword [rsp + 0x40], rdx
movabs rdx, 0x910141410031616
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x483200
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x48322d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x483250
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x4831df
jmp 0x483244
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00463f80
mov eax, edi
mov ecx, 0x18
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00483160
Function at 0x483280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48337d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x923886b1612bb21
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc0cf1e9d76092388
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3cf72bbe32c65e0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x701100d01091401
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100d0c0903141113
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x130b0b05100d0c09
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9060013020a0f11
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x483320
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x48334d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x483370
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4832ff
jmp 0x483364
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00483280

Function at 0x4880e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4881dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb9fda19cd2f89b73
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8681b9ea97b9fda1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656e64be7e4d209b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0311130c020706
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc0a100711050113
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x3040f0909090c0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0d0a10060c080b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x488180
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4881ad
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4881d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x48815f
jmp 0x4881c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004880e0
Function at 0x488b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488bfb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x9475c78c88836b8a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x80889465855b2065
mov qword [rsp + 0x20], rdx
movabs rdx, 0x987a69a4ac996c63
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13170a04140b0500
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe030b0d1217040f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x316001714000007
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1401130507020d0b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x488b99
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x488bcb
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x488bee
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x18
jb 0x488b7f
jmp 0x488be2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00463f80
mov eax, edi
mov ecx, 0x18
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.00488b00

Function at 0x48a160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a227
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xcc38212ea9f46e2b
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6cba
movabs rdx, 0x806070503050708
mov qword [rsp + 0x22], rdx
movabs rdx, 0x405060207000806
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x48a1c7
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x48a1f7
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x48a21a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x48a1aa
jmp 0x48a20e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00463f80
mov eax, edi
mov ecx, 0xa
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0048a160
Function at 0x48a320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a3ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1633146508d4196b
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb70fcf35
movabs rdx, 0x50a0101050b0809
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70303090208050a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48a385
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x48a3bc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x48a3df
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0xc
jb 0x48a36b
jmp 0x48a3d3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0048a320

Function at 0x48aaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ab72
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd1a7ec4c759c17f0
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xdbdce4d1a7ec4c75
mov qword [rsp + 0x20], rdx
movabs rdx, 0x101090804050000
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0a010502070606
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48ab0c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x48ab3e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x48ab65
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0xb
jb 0x48aaf2
jmp 0x48ab55
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00463f80
mov eax, edi
mov ecx, 0xb
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0048aaa0

Function at 0x48b040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b0fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6437cb335fdec6c2
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x33b9
movabs rdx, 0x206010009080906
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2060508
xor eax, eax
jmp 0x48b0a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x48b0cd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x48b0f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x48b083
jmp 0x48b0e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00463f80
mov eax, edi
mov ecx, 0xa
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0048b040
Function at 0x48b120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b20a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa282c265f36ed543
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa0536f5464a0a282
mov qword [rsp + 0x38], rdx
movabs rdx, 0x57d7b692e1c2ed72
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd05140510120303
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x701071103070d05
mov qword [rsp + 0x22], rdx
movabs rdx, 0x12140813080f0706
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x48b1ad
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x48b1da
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x48b1fd
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x48b190
jmp 0x48b1f1
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00463f80
mov eax, edi
mov ecx, 0x16
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0048b120

Function at 0x48b8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b98a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x71b741747054d243
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5557697571b74174
mov qword [rsp + 0x22], rdx
movabs rdx, 0x643f78c6d0c93843
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x130f12101006010d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x101120e0e0b130f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0a06100a060f02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x48b92d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x48b95a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x48b97d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x48b910
jmp 0x48b971
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0048b8a0