joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47f840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f932
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8fad3b81b783099a
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x9c619f72b9de7eb1
mov qword [rsp + 0x47], rdx
movabs rdx, 0x639c619f72b9de7e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9a7d9f9f94727467
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb0d150703050105
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x14080a040b0d1507
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x170f040f18180401
mov qword [rsp + 0x27], rdx
movabs rdx, 0x61000010d020316
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x803141705091011
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x47f915
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
movzx r9d, byte [rsp + rdi + 0x3f]
mov byte [rsp + rdi + 0x3f], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x24
jl 0x47f8dd
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0043c360
add rsp, 0x58
pop rbp
ret
call fcn.004497a0
jmp fcn.0047f840

Function at 0x47fa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47faab
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x71736175726d716e
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x59616c6c78717361
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7010308000c0a07
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x70b0b0b02060701
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x47fa89
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2b]
sub r8d, edx
add r8d, 0xb
movzx r9d, byte [rsp + rdi + 0x2b]
mov byte [rsp + rdi + 0x2b], r8b
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jl 0x47fa52
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop dword [rax + rax]
call fcn.0043c360
add rsp, 0x38
pop rbp
ret
call fcn.004497a0
jmp fcn.0047fa00

Function at 0x480440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480504
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x70f8273ba774be47
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf3902ac470f8273b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x73724f64d0c763c2
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa04030909060b03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x801040108050a04
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0a0f0c110a0e06
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4804e7
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x34]
sub r8d, edx
add r8d, 0xffffffb4
movzx r9d, byte [rsp + rdi + 0x34]
mov byte [rsp + rdi + 0x34], r8b
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jl 0x4804b0
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0043c360
add rsp, 0x48
pop rbp
ret
call fcn.004497a0
jmp fcn.00480440
Function at 0x480da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480e4b
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe96191006e8772ec
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf6306df60f0ee961
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80409070a0c0200
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd000500000a0804
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x480e29
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2a]
sub r8d, edx
add r8d, 0x77
movzx r9d, byte [rsp + rdi + 0x2a]
mov byte [rsp + rdi + 0x2a], r8b
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jl 0x480df2
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop dword [rax + rax]
call fcn.0043c360
add rsp, 0x38
pop rbp
ret
call fcn.004497a0
jmp fcn.00480da0

Function at 0x481bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481c85
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x796dd07c00415357
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xe1796dd07c004153
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2ff4da6f63f6f900
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa09090803050e07
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x40e0a0909080305
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb0a100a0a100f0e
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x481c68
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
movzx r9d, byte [rsp + rdi + 0x2f]
mov byte [rsp + rdi + 0x2f], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jl 0x481c30
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0043c360
add rsp, 0x40
pop rbp
ret
call fcn.004497a0
jmp fcn.00481bc0

Function at 0x481ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481f81
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6ae86369118f85f9
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xd37e726a
movabs rdx, 0x40a0701060209
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9060a090a030002
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x481f63
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
movzx r9d, byte [rsp + rdi + 0x2d]
mov byte [rsp + rdi + 0x2d], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jl 0x481f2b
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0043c360
add rsp, 0x38
pop rbp
nop
ret
call fcn.004497a0
jmp fcn.00481ee0
Function at 0x482400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4824ab
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x623a46fc12ce3c67
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x376d616e05623a46
mov qword [rsp + 0x30], rdx
movabs rdx, 0x505080606030502
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x50c010604060505
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x48248a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
movzx r9d, byte [rsp + rdi + 0x2b]
mov byte [rsp + rdi + 0x2b], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jl 0x482452
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop dword [rax]
call fcn.0043c360
add rsp, 0x38
pop rbp
ret
call fcn.004497a0
jmp fcn.00482400

Function at 0x482b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x482b9f
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf4ea63f073817567
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x1e5f6f4
movabs rdx, 0x70406080207060a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x401090801040704
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x482b82
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2d]
sub r8d, edx
add r8d, 0xffffff87
movzx r9d, byte [rsp + rdi + 0x2d]
mov byte [rsp + rdi + 0x2d], r8b
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jl 0x482b4b
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0043c360
add rsp, 0x38
pop rbp
ret
nop
call fcn.004497a0
jmp fcn.00482b00

Function at 0x4831c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483245
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6e7e857b7575817e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40503010605
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x483228
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x11]
movzx r9d, byte [rsp + rdi + 0x20]
mov byte [rsp + rdi + 0x20], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jl 0x4831f0
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0043c360
add rsp, 0x28
pop rbp
ret
call fcn.004497a0
jmp fcn.004831c0
Function at 0x483bc0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483c8a
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0
call fcn.00402840
xorps xmm15, xmm15
mov r14, qword [0x005b2a88]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
jne 0x483c6f
mov rcx, qword [rsp + 0x60]
lea rdx, [rcx + 1]
mov qword [rsp + 0x40], rdx
lea rax, [0x004a7d00]
xor ebx, ebx
mov rcx, rdx
call fcn.004392c0
mov rbx, qword [rsp + 0x60]
mov rcx, rax
xor edi, edi
mov rsi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x58]
nop dword [rax]
call fcn.00483f20
inc rbx
cmp rcx, rbx
jae 0x483c5e
mov edi, 1
lea rsi, [0x004a7d00]
call fcn.004393a0
mov word [rax + rbx*2 - 2], 0
xor edi, edi
xor esi, esi
add rsp, 0x48
pop rbp
ret
xor eax, eax
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x004d64a8]
lea rsi, [0x004d6208]
add rsp, 0x48
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.004497a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.00483bc0

Function at 0x485b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485c01
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5c3f6c4e0359656b
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x5f075619
movabs rdx, 0x20b030607040804
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6080309080a020b
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x485be3
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
movzx r9d, byte [rsp + rdi + 0x2c]
mov byte [rsp + rdi + 0x2c], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jl 0x485bab
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0043c360
add rsp, 0x38
pop rbp
nop
ret
call fcn.004497a0
jmp fcn.00485b60

Function at 0x486180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48622b
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x76656c6567f7ca52
mov qword [rsp + 0x29], rdx
movabs rdx, 0x57fc75df61566776
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3020d08060b0d07
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb01020d0103060b
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x48620a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
movzx r9d, byte [rsp + rdi + 0x29]
mov byte [rsp + rdi + 0x29], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jl 0x4861d2
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
nop dword [rax]
call fcn.0043c360
add rsp, 0x38
pop rbp
ret
call fcn.004497a0
jmp fcn.00486180
Function at 0x488040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x488114
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc4c400762177b2be
mov qword [rsp + 0x35], rdx
movabs rdx, 0x66d6a8c4c4007621
mov qword [rsp + 0x38], rdx
movabs rdx, 0x26cb869a8635401
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120e090d01060c03
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x51007090200120b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x201051007090200
mov qword [rsp + 0x25], rdx
movabs rdx, 0x608030007050803
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4880f7
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
movzx r9d, byte [rsp + rdi + 0x35]
mov byte [rsp + rdi + 0x35], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x1a
jl 0x4880bf
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0043c360
add rsp, 0x48
pop rbp
ret
call fcn.004497a0
jmp fcn.00488040

Function at 0x489000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4890d3
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x473d22163dc84853
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x643efc745345473d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x273a2b54d6647202
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1502130e05151504
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x608070c08111314
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0315150608070c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x61115080e010814
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4890b6
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3a]
sub r8d, edx
add r8d, 0x3e
movzx r9d, byte [rsp + rdi + 0x3a]
mov byte [rsp + rdi + 0x3a], r8b
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
cmp rax, 0x1c
jl 0x48907f
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0043c360
add rsp, 0x50
pop rbp
ret
call fcn.004497a0
jmp fcn.00489000
Function at 0x48a240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a313
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xee2763618820a1dc
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc31505e153d9f4e2
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe9b1fb54dc2c7286
mov qword [rsp + 0x48], rdx
movabs rdx, 0x31708070d0f1316
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90100130a150117
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8160e0d06121510
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0a170315071517
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48a2f6
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x38]
sub r8d, edx
add r8d, 0x63
movzx r9d, byte [rsp + rdi + 0x38]
mov byte [rsp + rdi + 0x38], r8b
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
cmp rax, 0x20
jl 0x48a2bf
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0043c360
add rsp, 0x50
pop rbp
ret
call fcn.004497a0
jmp fcn.0048a240

Function at 0x48b760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b833
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xeb08296ef36cc37b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x40d592211823eb08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x656d3b17b2edf207
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1100070e0b0606
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x110e110112091010
mov qword [rsp + 0x22], rdx
movabs rdx, 0x100f0707080c030f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0507070d13030a
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x48b816
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3a]
sub r8d, edx
add r8d, 0x61
movzx r9d, byte [rsp + rdi + 0x3a]
mov byte [rsp + rdi + 0x3a], r8b
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
cmp rax, 0x20
jl 0x48b7df
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0043c360
add rsp, 0x50
pop rbp
ret
call fcn.004497a0
jmp fcn.0048b760

Function at 0x48bfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c065
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf963bfa504429aa2
mov qword [rsp + 0x33], rdx
movabs rdx, 0xa86efc74edf963bf
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf26d69f2206472f6
mov qword [rsp + 0x40], rdx
movabs rdx, 0x104070008110501
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc08140d0c020104
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc0703020508010a
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x48c048
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
movzx r9d, byte [rsp + rdi + 0x33]
mov byte [rsp + rdi + 0x33], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jl 0x48c010
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0043c360
add rsp, 0x48
pop rbp
ret
call fcn.004497a0
jmp fcn.0048bfa0
Function at 0x48e280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48e344
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74534b6e35007548
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3a235e74534b6e35
mov qword [rsp + 0x38], rdx
movabs rdx, 0x384a4a2920244e42
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf100b0d12030f09
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa000810090c0205
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa03000b120d1211
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x48e327
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x35]
sub r8d, edx
add r8d, 0x2f
movzx r9d, byte [rsp + rdi + 0x35]
mov byte [rsp + rdi + 0x35], r8b
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jl 0x48e2f0
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0043c360
add rsp, 0x48
pop rbp
ret
call fcn.004497a0
jmp fcn.0048e280

Function at 0x48fa20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fae5
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20126154626172b9
mov qword [rsp + 0x33], rdx
movabs rdx, 0x6408c37442201261
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65b60db80423b961
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110e000f041113
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x130f13080a100808
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb060b130f13120e
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x48fac8
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
movzx r9d, byte [rsp + rdi + 0x33]
mov byte [rsp + rdi + 0x33], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jl 0x48fa90
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0043c360
add rsp, 0x48
pop rbp
ret
call fcn.004497a0
jmp fcn.0048fa20
Function at 0x48fe00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fef1
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6967136f4d200b57
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x192074ae50c58091
mov qword [rsp + 0x47], rdx
movabs rdx, 0xaa192074ae50c580
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8909ccb891d513db
mov qword [rsp + 0x50], rdx
movabs rdx, 0x71210100b180814
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb0c071210100b18
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1812141513011109
mov qword [rsp + 0x27], rdx
movabs rdx, 0x81717160f180b11
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x10120e0517090a05
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x48fed4
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3f]
sub r8d, edx
add r8d, 0x77
movzx r9d, byte [rsp + rdi + 0x3f]
mov byte [rsp + rdi + 0x3f], r8b
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x22
jl 0x48fe9d
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0043c360
add rsp, 0x58
pop rbp
ret
call fcn.004497a0
jmp fcn.0048fe00

Function at 0x48ff00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fff1
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x732420683d3ef24e
mov qword [rsp + 0x43], rdx
movabs rdx, 0x302f3c47452035a3
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x641b61c63a302f3c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa32db4fc20640930
mov qword [rsp + 0x58], rdx
movabs rdx, 0x16021a111a081c1a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1a02130c16021a11
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1106151c10090109
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xc0e1503021b0f19
mov qword [rsp + 0x33], rdx
movabs rdx, 0x215111b030d080d
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x48ffd4
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x43]
sub r8d, edx
add r8d, 0x4e
movzx r9d, byte [rsp + rdi + 0x43]
mov byte [rsp + rdi + 0x43], r8b
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
cmp rax, 0x24
jl 0x48ff9d
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.0043c360
add rsp, 0x60
pop rbp
ret
call fcn.004497a0
jmp fcn.0048ff00
Function at 0x4902e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4903d2
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x83a405f768892241
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6e25a0b89396619a
mov qword [rsp + 0x47], rdx
movabs rdx, 0xaa6e25a0b8939661
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd19af76ea226d8a6
mov qword [rsp + 0x50], rdx
movabs rdx, 0x506051606130d04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1514050605160613
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd010a160d0e1018
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1117040b12010c0d
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x10020a05070c0801
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4903b5
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
movzx r9d, byte [rsp + rdi + 0x3f]
mov byte [rsp + rdi + 0x3f], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x22
jl 0x49037d
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0043c360
add rsp, 0x58
pop rbp
ret
call fcn.004497a0
jmp fcn.004902e0

Function at 0x4903e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4904a5
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x97bba4696f73f9f5
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x80da7097bba4696f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3131fde36ef3fb20
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100506061003010a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x10f0f0710050606
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc0d0d080009010c
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x490488
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
movzx r9d, byte [rsp + rdi + 0x2d]
mov byte [rsp + rdi + 0x2d], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x14
jl 0x490450
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.0043c360
add rsp, 0x40
pop rbp
ret
call fcn.004497a0
jmp fcn.004903e0