joyce8/EMBER2024-capa huggingface dataset:
Function at 0x471f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x472068
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa5a97275d5867bb2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7d6f6c64d610e820
mov qword [rsp + 0x27], rdx
movabs rdx, 0xdb7d6f6c64d610e8
mov qword [rsp + 0x28], rdx
movabs rdx, 0xae94648ece7661ba
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10180a031702010f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140a031809030700
mov qword [rsp + 0x40], rdx
movabs rdx, 0x714151109100b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x61011030903180a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x47200b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x472038
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x47205b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x471fee
jmp 0x47204f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460ec0
mov eax, edi
mov ecx, 0x19
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00471f60
Function at 0x4751c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4752a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x201d6f386559616e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6b818378616d201d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc080a050b0a0c05
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb05040c080a05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60508010d020a0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x475240
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x475272
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x475297
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0xe
jb 0x475222
jmp 0x47528b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004751c0

Function at 0x4752c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4753cc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5332ea6c2416656e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x636e79f185f0206e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8a65333c6ed0f6da
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x11111414100b0a00
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100311111414100b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7050c17050a150c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17030a0c15150c05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110211120a030009
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x475368
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x47539c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4753bf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0x18
jb 0x47534e
jmp 0x4753b3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460ec0
mov eax, edi
mov ecx, 0x18
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004752c0
Function at 0x476580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4766f2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0xc2f9d939ad742161
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x692e204a74568d6e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x745bb769a1e16369
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xbf930bb86d73fd8b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe739d1652061597d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x7656903e7d29276
mov qword [rsp + 0x46], rdx
movabs rdx, 0x222b04010c2b1d03
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x28152619261c140a
mov qword [rsp + 0x56], rdx
movabs rdx, 0x62628152619261c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x14120918171d200e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d070e2a222e0114
mov qword [rsp + 0x68], rdx
movabs rdx, 0x241e251f17031124
mov qword [rsp + 0x70], rdx
movabs rdx, 0x291d272818101f03
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2829051814141b20
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x47668d
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x3a
jge 0x4766bf
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x4766e5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0x2f
jb 0x476673
jmp 0x4766d9
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2f
call fcn.0044b900
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00460ec0
mov eax, edi
mov ecx, 0x2f
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00476580

Function at 0x4783a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x478486
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xba6b11bb7759cdfa
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e15a80332736bba
mov qword [rsp + 0x22], rdx
movabs rdx, 0x108000802070107
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0d0a0400070108
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb05000d05040001
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x478420
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x478452
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x478477
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
cmp rsi, 0xf
jb 0x478402
jmp 0x47846b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004783a0
Function at 0x4798e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4799ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20a81205b00f6f08
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xca136976105720a8
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd020c0006030408
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x509060306040d02
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x47994f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x47997c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x47999f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x479932
jmp 0x479993
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004798e0

Function at 0x479e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479f4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xebe86820696e617c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e6576e220ebe868
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb6fa7201766b6efb
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90301090d0f060e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf1309000a0a0903
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110a06130d140709
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x479eed
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x479f1a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x479f3d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x479ed0
jmp 0x479f31
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460ec0
mov eax, edi
mov ecx, 0x15
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00479e60
Function at 0x47bd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47be4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6a6e54687f135473
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x636568204a6a6e54
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6b89626172716f84
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50204010804100d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf010f03070f0e0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1001140a14130708
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x47bded
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x47be1a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x47be3d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x47bdd0
jmp 0x47be31
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460ec0
mov eax, edi
mov ecx, 0x15
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0047bd60
Function at 0x47dca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47dd7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x442011c34a3b076f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3d2c3bcb3f4891bd
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0e0e04080c0109
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20f070e050a0f08
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd09030a010d0c0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x47dd20
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x47dd4d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x47dd70
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x47dd02
jmp 0x47dd64
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460ec0
mov eax, edi
mov ecx, 0x10
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.0047dca0

Function at 0x480d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480e06
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x494a694861f86431
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6c1c502e
movabs rdx, 0x4020a060a0204
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x9040700
xor eax, eax
jmp 0x480da0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x480dd2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x480df7
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0xc
jb 0x480d84
jmp 0x480deb
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00480d40

Function at 0x481080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481147
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x69482870223f3269
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x593a5260
movabs rdx, 0xa090205010b0101
mov qword [rsp + 0x28], rdx
movabs rdx, 0x206030809050206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4810e8
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x481117
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x48113a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4810cb
jmp 0x48112e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00481080
Function at 0x481520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4815ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4333832c3b01ff00
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c00642e
movabs rdx, 0x301000207050a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5040401010a0003
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x481585
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4815bc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4815df
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0xc
jb 0x48156b
jmp 0x4815d3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00481520

Function at 0x481ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481f7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd4e832e75f320ede
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xaf69
movabs rdx, 0x707060800040100
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x609
xor eax, eax
jmp 0x481f20
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x481f4d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x481f70
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x481f02
jmp 0x481f64
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460ec0
mov eax, edi
mov ecx, 0xa
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00481ec0
Function at 0x482820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48290a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x62c1768c886f728e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8d65ab6f62c1768c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5759bf7653844164
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90c060f02070905
mov qword [rsp + 0x30], rdx
movabs rdx, 0x12000310110e1105
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120e0b04050e120f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4828ad
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x4828da
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4828fd
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x482890
jmp 0x4828f1
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460ec0
mov eax, edi
mov ecx, 0x14
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00482820

Function at 0x482f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483007
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaa4bf4b9ee7465fe
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x149f538f
movabs rdx, 0x5060a0a0b0308
mov qword [rsp + 0x28], rdx
movabs rdx, 0x805060007040a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x482fa8
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x482fd7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x482ffa
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x482f8b
jmp 0x482fee
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00482f40
Function at 0x483d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483e46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3d7265755167651b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6c312f4b56526e44
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0b0a08070f080c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0a0d0b0a08070f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0b080b000f0f
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x483de0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x483e12
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x483e37
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0x10
jb 0x483dc2
jmp 0x483e2b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00483d60

Function at 0x483e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483f68
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x4e65724334442664
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x666933566561276b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x74592e5d66693356
mov qword [rsp + 0x28], rdx
movabs rdx, 0x58781f4f6146436e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x902160c15191b0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1121100181b0101
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21607020c190a10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110814080a030117
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x483f0b
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x20
jge 0x483f38
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x483f5b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x483eee
jmp 0x483f4f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1c
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00483e60
Function at 0x483f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48408c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8675b47e947f9c9b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8d699b6988726e43
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd794618d699b6988
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x937289c1b985bf73
mov qword [rsp + 0x32], rdx
movabs rdx, 0x141702001616010d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb1a1a1218051609
mov qword [rsp + 0x42], rdx
movabs rdx, 0xb17180f11030b1a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x409180f07150214
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x484028
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1e
jge 0x48405c
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x48407f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x1b
jb 0x48400e
jmp 0x484073
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1b
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1b
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00483f80

Function at 0x485d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485e4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb8be8f8d619272ac
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x96cb67b8be8f8d61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80906090a090008
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa04050207050809
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x485def
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x485e1c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x485e3f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x485dd2
jmp 0x485e33
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00485d80