joyce8/EMBER2024-capa huggingface dataset:
Function at 0x478260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478327
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x728f20797d6d6873
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x65808572
movabs rdx, 0x409090603040304
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x403030306080202
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4782c8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x4782f7
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x47831a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4782ab
jmp 0x47830e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004669c0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046c880
mov eax, edi
mov ecx, 0xb
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00478260

Function at 0x478fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4790dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x45dc5372381b2869
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x6f20652eef722b42
mov qword [rsp + 0x43], rdx
movabs rdx, 0x3a350ee90d6f2065
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65704c0020414916
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2100c11150c1902
mov qword [rsp + 0x19], rdx
movabs rdx, 0x140702100c11150c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x150c1313030b1208
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1516091717060901
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x516191a10010911
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x479080
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4790ad
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4790d0
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x47905d
jmp 0x4790c4
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.004669c0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0046c880
mov eax, edi
mov ecx, 0x1d
call fcn.0046c880
nop
nop dword [rax]
call fcn.0046a5a0
jmp fcn.00478fc0
Function at 0x47a4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a586
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9d160303f97361e8
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xf2
movabs rdx, 0x404070500000603
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x508
xor eax, eax
nop
jmp 0x47a520
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x47a552
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47a577
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 9
jb 0x47a502
jmp 0x47a56b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046c880
mov eax, edi
mov ecx, 9
nop
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.0047a4c0

Function at 0x47a920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a9d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x719e6f6da1ccc3f8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x706030201070700
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x103
xor eax, eax
jmp 0x47a975
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x47a9a8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47a9cb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
nop
cmp rsi, 8
jb 0x47a95b
jmp 0x47a9bf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046c880
mov eax, edi
mov ecx, 8
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.0047a920

Function at 0x47aa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47aab8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x97ca9c98d4ca7542
mov qword [rsp + 0x28], rdx
movabs rdx, 0x504070204070306
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x5020405
xor eax, eax
jmp 0x47aa59
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x47aa88
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47aaab
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x47aa3c
jmp 0x47aa9f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046c880
mov eax, edi
mov ecx, 8
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.0047aa00
Function at 0x47b160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b21d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f446e6965786773
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x7f
movabs rdx, 0x706050100060502
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x108
xor eax, eax
nop
jmp 0x47b1c0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x47b1ed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47b210
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x47b1a2
jmp 0x47b204
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046c880
mov eax, edi
mov ecx, 9
call fcn.0046c880
nop
nop dword [rax]
call fcn.0046a5a0
jmp fcn.0047b160

Function at 0x47bde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47be98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe460dddeb73475ea
mov qword [rsp + 0x28], rdx
movabs rdx, 0x606020704050304
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x7000605
xor eax, eax
jmp 0x47be39
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x47be68
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47be8b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x47be1c
jmp 0x47be7f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046c880
mov eax, edi
mov ecx, 8
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.0047bde0

Function at 0x47d5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d6a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7d6a7272656a6761
mov qword [rsp + 0x30], rdx
movabs rdx, 0x475862675c724162
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0b000f0d060d07
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0105050d0b000f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80e060d07020706
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x47d640
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x47d672
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x47d697
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x11]
cmp rsi, 0x10
jb 0x47d622
jmp 0x47d68b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.004669c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0046c880
mov eax, edi
mov ecx, 0x10
nop
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.0047d5c0
Function at 0x47d6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d786
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8f7469666b538480
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x64
movabs rdx, 0x2000701070107
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x4030703
xor eax, eax
nop
jmp 0x47d720
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x47d752
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47d777
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 9
jb 0x47d702
jmp 0x47d76b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046c880
mov eax, edi
mov ecx, 9
nop
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.0047d6c0

Function at 0x47e100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47e1b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6997b5f84d790f98
mov qword [rsp + 0x28], rdx
movabs rdx, 0x600050403040501
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x503
xor eax, eax
jmp 0x47e155
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x47e188
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47e1ab
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
nop
cmp rsi, 8
jb 0x47e13b
jmp 0x47e19f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046c880
mov eax, edi
mov ecx, 8
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.0047e100

Function at 0x484fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48509d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xbd7a2dde2100395a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6572617597d95f72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2070a0b040b0b02
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x503070502070a0b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1050a05050b020a
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x485040
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x48506d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x485090
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x485022
jmp 0x485084
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.004669c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0046c880
mov eax, edi
mov ecx, 0x10
call fcn.0046c880
nop
nop dword [rax]
call fcn.0046a5a0
jmp fcn.00484fc0
Function at 0x4850c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485192
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4326204914464f3e
mov qword [rsp + 0x29], rdx
movabs rdx, 0x20d183f44144c43
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60305000b07080d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc0602090e020801
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x48512c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x48515e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x485185
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0xf
jb 0x485112
jmp 0x485175
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.004669c0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.0046c880
mov eax, edi
mov ecx, 0xf
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.004850c0

Function at 0x485ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485fdb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x45f8984c5f534449
mov qword [rsp + 0x35], rdx
movabs rdx, 0xe3b6c145f8984c5f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x346fc7611a65d2f7
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0c120909120609
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5040e050b08040b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x70605040e050b08
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1009090507060e06
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x485f79
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x485fab
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x485fce
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x13
jb 0x485f5f
jmp 0x485fc2
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046c880
mov eax, edi
mov ecx, 0x13
call fcn.0046c880
nop
nop dword [rax + rax]
call fcn.0046a5a0
jmp fcn.00485ee0
Function at 0x4867c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486887
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x34afa1673565afad
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xb0f49234
movabs rdx, 0x607030001050906
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60a080006000607
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x486828
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x486857
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x48687a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x48680b
jmp 0x48686e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004669c0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046c880
mov eax, edi
mov ecx, 0xb
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.004867c0

Function at 0x48bb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48bbfb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c6164695e604c54
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6154503c6c616469
mov qword [rsp + 0x38], rdx
movabs rdx, 0x616f614465525063
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb080f030b131101
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x100b0d0e0d110301
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd10100b0d0e0d11
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0e080a0502030b
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x48bb99
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xd]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1a
jge 0x48bbcb
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x48bbee
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xd]
cmp rsi, 0x14
jb 0x48bb7f
jmp 0x48bbe2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046c880
mov eax, edi
mov ecx, 0x14
call fcn.0046c880
nop
nop dword [rax + rax]
call fcn.0046a5a0
jmp fcn.0048bb00
Function at 0x48bc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48bd0a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf964052466ac8bd4
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x91f964052466ac8b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc708b9d4e000e64
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4010c02010e0008
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe07050b0d050401
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa010a0c101002
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x48bcad
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x16
jge 0x48bcda
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x48bcfd
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x48bc90
jmp 0x48bcf1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.004669c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0046c880
mov eax, edi
mov ecx, 0x11
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.0048bc20

Function at 0x48bfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c0a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7053606574646863
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xe063d670
movabs rdx, 0x505020800080502
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0xa0a080a
xor eax, eax
jmp 0x48c040
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x48c072
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x48c097
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
cmp rsi, 0xb
jb 0x48c024
jmp 0x48c08b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046c880
mov eax, edi
mov ecx, 0xb
nop
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.0048bfe0

Function at 0x490e80
Capabilities:
Encode data using xor

Disassembly:
mov rbx, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x20]
test rdx, 0xf
jne 0x490efa
mov rax, 0
nop word [rax + rax]
nop dword [rax]
movdqu xmm0, xmmword [rsi + rax]
movdqu xmm1, xmmword [rcx + rax]
pxor xmm0, xmm1
movdqu xmmword [rbx + rax], xmm0
add rax, 0x10
cmp rdx, rax
jne 0x490eb0
ret
sub rdx, 1
mov dil, byte [rsi + rdx]
mov al, byte [rcx + rdx]
xor dil, al
mov byte [rbx + rdx], dil
test rdx, 7
jne 0x490ed0
cmp rdx, 0
je 0x490f1c
test rdx, 0xf
je 0x490e9d
test rdx, 7
jne 0x490ed0
sub rdx, 8
mov rdi, qword [rsi + rdx]
mov rax, qword [rcx + rdx]
xor rdi, rax
mov qword [rbx + rdx], rdi
cmp rdx, 0x10
jge 0x490e9d
ret
Function at 0x4918e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x491a18
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xb633a20fc8220363
mov qword [rsp + 0x44], rdx
movabs rdx, 0x3b6870cfb633a20f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb925d0be76663aba
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6cb966bb7fe6c166
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc4e5febb6762208e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x21110f0b23010605
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc1008030b131f20
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40f02040c100803
mov qword [rsp + 0x24], rdx
movabs rdx, 0x121f1f22140e1505
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x111a1f180716231c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x13021c0720182117
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4919b5
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4919e8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x491a0b
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
nop
cmp rsi, 0x24
jb 0x49199b
jmp 0x4919ff
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x24
call fcn.004669c0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.0046c880
mov eax, edi
mov ecx, 0x24
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.004918e0
Function at 0x492840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x492a0c
push rbp
mov rbp, rsp
sub rsp, 0xa8
movups xmmword [rsp + 0xb8], xmm15
movups xmmword [rsp + 0xc8], xmm15
movups xmmword [rsp + 0xd8], xmm15
movups xmmword [rsp + 0xe8], xmm15
movabs rdx, 0x352316d2172a0b4
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2208ac946a2a3a38
mov qword [rsp + 0x70], rdx
movabs rdx, 0xe2332b2d9a6dff82
mov qword [rsp + 0x78], rdx
movabs rdx, 0x9cf6c27dec212735
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1095e7a11b3037e9
mov qword [rsp + 0x88], rdx
movabs rdx, 0x5017d5bb87812390
mov qword [rsp + 0x90], rdx
movabs rdx, 0xe2e114fa8c26b163
mov qword [rsp + 0x98], rdx
movabs rdx, 0x6aa4926ea813f272
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x80311041f1f3412
mov qword [rsp + 0x14], rdx
lea rdi, [rsp + 0x18]
lea rsi, [0x005f2918]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046ce9a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x492953
movzx r8d, byte [rsp + rbx + 0x68]
sub r8d, edx
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x68], dl
lea edx, [rdi - 0x25]
mov byte [rsp + rbx + 0x68], dl
add rax, 2
cmp rax, 0x54
jge 0x492988
movzx edx, byte [rsp + rax + 0x14]
movzx ebx, byte [rsp + rax + 0x15]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x40
jae 0x4929ff
movzx edi, byte [rsp + rsi + 0x68]
sub edi, edx
nop word [rax + rax]
cmp rbx, 0x40
jb 0x492937
jmp 0x4929f3
movups xmmword [rsp + 0x14], xmm15
movups xmmword [rsp + 0x24], xmm15
movups xmmword [rsp + 0x34], xmm15
movups xmmword [rsp + 0x44], xmm15
xor eax, eax
jmp 0x4929b0
movzx ecx, byte [rsp + rax + 0x68]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 0x40
jl 0x4929a4
movups xmm0, xmmword [rsp + 0x14]
movups xmmword [rsp + 0xb8], xmm0
movups xmm0, xmmword [rsp + 0x24]
movups xmmword [rsp + 0xc8], xmm0
movups xmm0, xmmword [rsp + 0x34]
movups xmmword [rsp + 0xd8], xmm0
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rsp + 0xe8], xmm0
add rsp, 0xa8
pop rbp
ret
mov eax, ebx
mov ecx, 0x40
call fcn.0046c880
mov eax, esi
mov ecx, 0x40
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00492840