joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47afc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b086
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc1bd30b84ebdbfbe
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x40
movabs rdx, 0x607000100030208
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x402
xor eax, eax
nop
jmp 0x47b020
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x47b052
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x47b077
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 9
jb 0x47b002
jmp 0x47b06b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456420
mov eax, edi
mov ecx, 9
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0047afc0

Function at 0x47bdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47be8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x366f34733777e924
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x357e7938b5b3366f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6000b0104090100
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb080204060c0b08
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x47be2f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x47be5c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x47be7f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x47be12
jmp 0x47be73
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456420
mov eax, edi
mov ecx, 0xe
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0047bdc0
Function at 0x47c400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c4e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe140ffc1a1d26dc
mov qword [rsp + 0x31], rdx
movabs rdx, 0x1013f5333032ce0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60d020800040501
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1010c04060d0208
mov qword [rsp + 0x21], rdx
movabs rdx, 0x70c030203040e
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x47c480
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x47c4b2
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47c4d7
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0xf
jb 0x47c462
jmp 0x47c4cb
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456420
mov eax, edi
mov ecx, 0xf
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0047c400

Function at 0x47cb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47cc2c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x75327b75a7397982
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x6775327b75a73979
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb94e317cb983bd69
mov qword [rsp + 0x38], rdx
movabs rdx, 0x310010b0f0b0a00
mov qword [rsp + 0x19], rdx
movabs rdx, 0x50d09100c0c0310
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4080c0007030401
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x47cbca
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x16
jge 0x47cbfc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47cc1f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x11
jb 0x47cbb0
jmp 0x47cc13
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0047cb40
Function at 0x47cc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47cd2c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb1b1a5342236100f
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x37b1b1a534223610
mov qword [rsp + 0x30], rdx
movabs rdx, 0x35b36ea6b53335a0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1060e0c010e0307
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6090c0f01060e0c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x90d05000f070009
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x47ccca
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x47ccfc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47cd1f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0x11
jb 0x47ccb0
jmp 0x47cd13
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0047cc40

Function at 0x47cd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ce3d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe78fed889fde4d32
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9633e78fed889fde
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0ec96ef3591368e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1090c0211091006
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90e07040c0f010f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0a090e07040c0f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30e040609090506
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x47cde0
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x47ce0d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47ce30
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x47cdbf
jmp 0x47ce24
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456420
mov eax, edi
mov ecx, 0x12
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.0047cd40
Function at 0x47d200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47d2fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x356f5835d4bb3a37
mov qword [rsp + 0x35], rdx
movabs rdx, 0xd5cacd356f5835d4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7fdb31877d82e932
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60a090501120602
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x611050d090e0508
mov qword [rsp + 0x23], rdx
movabs rdx, 0x60e0611050d090e
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf0612060c060306
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x47d2a0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x47d2cd
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x47d2f0
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x47d27f
jmp 0x47d2e4
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.0047d200

Function at 0x47f2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f3bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xca788e7fc8df32c5
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb9f4343338d7c8ef
mov qword [rsp + 0x46], rdx
movabs rdx, 0x7882b9f4343338d7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x35cd7733989740ca
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7091808050f0a13
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x602100007091808
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10120a0711170305
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1014150e05040f14
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1315071809080610
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x47f360
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x47f38d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x47f3b0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x47f33d
jmp 0x47f3a4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456420
mov eax, edi
mov ecx, 0x1a
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.0047f2a0
Function at 0x484f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x48505d
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x98a5eaadcb08e131
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2ae434317fdf3038
mov qword [rsp + 0x60], rdx
movabs rdx, 0x8f0e2f32b1e609be
mov qword [rsp + 0x68], rdx
movabs rdx, 0x35004189ebf39dd8
mov qword [rsp + 0x70], rdx
movabs rdx, 0x9090d0088ba3532
mov qword [rsp + 0x78], rdx
movabs rdx, 0x41722011c170b0b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb051d1823161c26
mov qword [rsp + 0x26], rdx
movabs rdx, 0x19160b051d182316
mov qword [rsp + 0x28], rdx
movabs rdx, 0x12100e2706100124
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1b22032725061613
mov qword [rsp + 0x38], rdx
movabs rdx, 0x21126070a1a181a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1526191e22272726
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a0a2613250f1716
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x485000
movzx r9d, byte [rsp + rsi + 0x58]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x58], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x58], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x3a
jge 0x48502d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x485050
movzx r8d, byte [rsp + rdi + 0x58]
sub r8d, edx
cmp rsi, 0x28
jb 0x484fde
jmp 0x485044
xor eax, eax
lea rbx, [rsp + 0x58]
mov ecx, 0x28
call fcn.00444780
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00456420
mov eax, edi
mov ecx, 0x28
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00484f00
Function at 0x485080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4851dd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xca33dc38abef2836
mov qword [rsp + 0x58], rdx
movabs rdx, 0x177f4a1afaa3a930
mov qword [rsp + 0x60], rdx
movabs rdx, 0xed36e434e6e1ed54
mov qword [rsp + 0x68], rdx
movabs rdx, 0x25bcde35ceba39e1
mov qword [rsp + 0x70], rdx
movabs rdx, 0xe3cce533ed9a3632
mov qword [rsp + 0x78], rdx
movabs rdx, 0x3031825260d0a09
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x170b1b0712270f1a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1f01170b1b071227
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1f1e0b22170c1325
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11a130f1e130f10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc2205100517260b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1322051502230f0e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a1d110b0c010f1e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x485180
movzx r9d, byte [rsp + rsi + 0x58]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x58], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x58], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x3a
jge 0x4851ad
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4851d0
movzx r8d, byte [rsp + rdi + 0x58]
sub r8d, edx
cmp rsi, 0x28
jb 0x48515e
jmp 0x4851c4
xor eax, eax
lea rbx, [rsp + 0x58]
mov ecx, 0x28
call fcn.00444780
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00456420
mov eax, edi
mov ecx, 0x28
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00485080
Function at 0x4855e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48572c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xfa8da837a0bdd72e
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xbe950519561935b6
mov qword [rsp + 0x56], rdx
movabs rdx, 0x3030be9505195619
mov qword [rsp + 0x58], rdx
movabs rdx, 0xae34329e0131a3f7
mov qword [rsp + 0x60], rdx
movabs rdx, 0x903014bc19338388
mov qword [rsp + 0x68], rdx
movabs rdx, 0x3532a33832138a8a
mov qword [rsp + 0x70], rdx
movabs rdx, 0xf1f021107231e08
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x190c000d24050327
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa1d210f1d0a0519
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x207150e0b010123
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10e022202120d0b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1b1316061a230e
mov qword [rsp + 0x46], rdx
xor eax, eax
jmp 0x4856c4
movzx r9d, byte [rsp + rsi + 0x4e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x4e], dl
mov byte [rsp + rsi + 0x4e], r8b
add rax, 2
cmp rax, 0x30
jge 0x4856fc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2a
jae 0x48571f
movzx r8d, byte [rsp + rdi + 0x4e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0x2a
jb 0x4856aa
jmp 0x485713
xor eax, eax
lea rbx, [rsp + 0x4e]
mov ecx, 0x2a
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00456420
mov eax, edi
mov ecx, 0x2a
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004855e0

Function at 0x485740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485898
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x9488bb98d023f338
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xc2676683cd386cd2
mov qword [rsp + 0x56], rdx
movabs rdx, 0x538ac2676683cd38
mov qword [rsp + 0x58], rdx
movabs rdx, 0x8132db8508a3d3b1
mov qword [rsp + 0x60], rdx
movabs rdx, 0x33333539703d8e97
mov qword [rsp + 0x68], rdx
movabs rdx, 0x357e893034313940
mov qword [rsp + 0x70], rdx
movabs rdx, 0x141512050b040228
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1d1a141512050b04
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1a16011903070617
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1009280910131606
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0f27110619080f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x806041107140d10
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x50e051b221c0712
mov qword [rsp + 0x46], rdx
xor eax, eax
jmp 0x485833
movzx r9d, byte [rsp + rsi + 0x4e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x4e], dl
mov byte [rsp + rsi + 0x4e], r8b
add rax, 2
cmp rax, 0x32
jge 0x485868
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x48588b
movzx r8d, byte [rsp + rdi + 0x4e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
nop dword [rax]
cmp rsi, 0x2a
jb 0x485819
jmp 0x48587f
xor eax, eax
lea rbx, [rsp + 0x4e]
mov ecx, 0x2a
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00456420
mov eax, edi
mov ecx, 0x2a
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.00485740
Function at 0x48ae20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x48af8c
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x9e21c4446390a08c
mov qword [rsp + 0x57], rdx
movabs rdx, 0x2261fd89bdb5cce0
mov qword [rsp + 0x5f], rdx
movabs rdx, 0xbb2261fd89bdb5cc
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc08ca06e899ddde8
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf2616dd4b5a3aa74
mov qword [rsp + 0x70], rdx
movabs rdx, 0x5a698ecf9374aca2
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2501210f0b050b06
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1812211d120d0720
mov qword [rsp + 0x23], rdx
movabs rdx, 0x91610061812211d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1a0a28171d11131c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x811081b0727211c
mov qword [rsp + 0x37], rdx
movabs rdx, 0x16001b2027020424
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xd01260622200c14
mov qword [rsp + 0x47], rdx
movabs rdx, 0x70800281b1a1d1c
mov qword [rsp + 0x4f], rdx
xor eax, eax
jmp 0x48af27
movzx r9d, byte [rsp + rsi + 0x57]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x57], dl
mov byte [rsp + rsi + 0x57], r8b
add rax, 2
cmp rax, 0x3c
jge 0x48af5c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x29
jae 0x48af7f
movzx r8d, byte [rsp + rdi + 0x57]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0x29
jb 0x48af0d
jmp 0x48af73
xor eax, eax
lea rbx, [rsp + 0x57]
mov ecx, 0x29
call fcn.00444780
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00456420
mov eax, edi
mov ecx, 0x29
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0048ae20

Function at 0x48d6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48d766
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x278fb6cc57d29f1
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x34
movabs rdx, 0x307050207070701
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 5
xor eax, eax
nop
jmp 0x48d700
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x48d732
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48d757
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 9
jb 0x48d6e2
jmp 0x48d74b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456420
mov eax, edi
mov ecx, 9
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0048d6a0
Function at 0x48db20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48dbe6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8c6166da9774aaa8
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x97
movabs rdx, 0x701080300010104
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x4000803
xor eax, eax
nop
jmp 0x48db80
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x48dbb2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48dbd7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 9
jb 0x48db62
jmp 0x48dbcb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456420
mov eax, edi
mov ecx, 9
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0048db20
Function at 0x494dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x494ebb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x515b3565261a3603
mov qword [rsp + 0x39], rdx
movabs rdx, 0xf010510c6c503851
mov qword [rsp + 0x40], rdx
movabs rdx, 0xbe630a663f65743b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb060d140c051209
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf070e0300030816
mov qword [rsp + 0x23], rdx
movabs rdx, 0x607030301080f07
mov qword [rsp + 0x29], rdx
movabs rdx, 0xe0203140c000701
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x494e59
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1e
jge 0x494e8b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x494eae
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
cmp rsi, 0x17
jb 0x494e3f
jmp 0x494ea2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456420
mov eax, edi
mov ecx, 0x17
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.00494dc0
Function at 0x4976e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4977fd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20ff146f1c6b6048
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6151613420499139
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd562615161342049
mov qword [rsp + 0x48], rdx
movabs rdx, 0x64241d672b164810
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1714121811140911
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1205170005091714
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100e11060c141506
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1808130018031412
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110060318060016
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4977a0
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4977cd
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4977f0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x49777d
jmp 0x4977e4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456420
mov eax, edi
mov ecx, 0x1a
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004976e0

Function at 0x499720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x49987d
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xe7729fe778728186
mov qword [rsp + 0x53], rdx
movabs rdx, 0xc26ea6f68e6eb165
mov qword [rsp + 0x5b], rdx
movabs rdx, 0xc89c6520cac26ea6
mov qword [rsp + 0x60], rdx
movabs rdx, 0x308c7dc0203abf8e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x859b6765fd5c7d51
mov qword [rsp + 0x70], rdx
movabs rdx, 0x9465686e699db4cd
mov qword [rsp + 0x78], rdx
movabs rdx, 0x208021c060b260f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x11e1d270208021c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x91a0603201f222a
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x140c251021072613
mov qword [rsp + 0x33], rdx
movabs rdx, 0x231f0423252c1b05
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1016030025240f15
mov qword [rsp + 0x43], rdx
movabs rdx, 0x1a0d100c141a1921
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x499820
movzx r9d, byte [rsp + rsi + 0x53]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x53], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x53], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x34
jge 0x49984d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x499870
movzx r8d, byte [rsp + rdi + 0x53]
sub r8d, edx
cmp rsi, 0x2d
jb 0x4997fe
jmp 0x499864
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x2d
call fcn.00444780
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00456420
mov eax, edi
mov ecx, 0x2d
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00499720