joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46c440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c598
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x99b348bd7e5bb70
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x61ee20f89a65cbb0
mov qword [rsp + 0x55], rdx
movabs rdx, 0x73ec6c61ee20f89a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20fdf66574037220
mov qword [rsp + 0x60], rdx
movabs rdx, 0xdf61aab9d64ab96e
mov qword [rsp + 0x68], rdx
movabs rdx, 0xccd89ae7cb20e76f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1d041815080b1722
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1c1d1d041815080b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x329290519170008
mov qword [rsp + 0x25], rdx
movabs rdx, 0x11030b2a0e022822
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x806260411190c22
mov qword [rsp + 0x35], rdx
movabs rdx, 0x8082a1f08071e01
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xc2009071e222427
mov qword [rsp + 0x45], rdx
xor eax, eax
jmp 0x46c533
movzx r9d, byte [rsp + rsi + 0x4d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x4d], dl
mov byte [rsp + rsi + 0x4d], r8b
add rax, 2
cmp rax, 0x32
jge 0x46c568
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x46c58b
movzx r8d, byte [rsp + rdi + 0x4d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
nop dword [rax]
cmp rsi, 0x2b
jb 0x46c519
jmp 0x46c57f
xor eax, eax
lea rbx, [rsp + 0x4d]
mov ecx, 0x2b
call fcn.0045b080
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2b
call fcn.004607e0
mov eax, edi
mov ecx, 0x2b
call fcn.004607e0
nop
call fcn.0045e500
nop dword [rax]
jmp fcn.0046c440

Function at 0x46c5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c6ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6ea6feff8662d9e1
mov qword [rsp + 0x34], rdx
movabs rdx, 0xeb6c48f66ea6feff
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf063e6b168773064
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb11030502080113
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd06130904080b11
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1009041005061300
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x46c64a
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x16
jge 0x46c67c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x46c69f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x14
jb 0x46c630
jmp 0x46c693
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045b080
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004607e0
mov eax, edi
mov ecx, 0x14
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.0046c5c0
Function at 0x46c6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46c7bb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe6bac2c46b6577bd
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd166128e6bac2c4
mov qword [rsp + 0x38], rdx
movabs rdx, 0xbbc1d9ffbe6fba64
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb050d100801120a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x711010110050812
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf06071101011005
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd06131204070011
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x46c759
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1a
jge 0x46c78b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x46c7ae
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 0x14
jb 0x46c73f
jmp 0x46c7a2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045b080
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004607e0
mov eax, edi
mov ecx, 0x14
call fcn.004607e0
nop
nop dword [rax + rax]
call fcn.0045e500
jmp fcn.0046c6c0

Function at 0x46f7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46f88c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x56c8b273cbe06944
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xe9eab256
movabs rdx, 0x909070208070806
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50305060a080909
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x46f825
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x46f85c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x46f87f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0xb
jb 0x46f80b
jmp 0x46f873
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004607e0
mov eax, edi
mov ecx, 0xb
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.0046f7c0
Function at 0x470380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470438
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa40cfee6690432af
mov qword [rsp + 0x28], rdx
movabs rdx, 0x401010706060400
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x2050705
xor eax, eax
jmp 0x4703d6
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x470408
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47042b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 8
jb 0x4703bc
jmp 0x47041f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004607e0
mov eax, edi
mov ecx, 8
call fcn.004607e0
nop
call fcn.0045e500
nop dword [rax]
jmp fcn.00470380

Function at 0x472300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4723b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd923291f0d352423
mov qword [rsp + 0x28], rdx
movabs rdx, 0x504020207060003
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x601
xor eax, eax
jmp 0x472355
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x472388
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4723ab
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
nop
cmp rsi, 8
jb 0x47233b
jmp 0x47239f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004607e0
mov eax, edi
mov ecx, 8
call fcn.004607e0
nop
call fcn.0045e500
nop dword [rax]
jmp fcn.00472300

Function at 0x473340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473406
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe5303acdb36c6132
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x34
movabs rdx, 0x806070406050806
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x3000000
xor eax, eax
nop
jmp 0x4733a0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4733d2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4733f7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
cmp rsi, 9
jb 0x473382
jmp 0x4733eb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004607e0
mov eax, edi
mov ecx, 9
nop
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.00473340
Function at 0x473ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473bac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc7698ee865cc659d
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x81a6a5c7
movabs rdx, 0x809080407070200
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa05040007090809
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x473b45
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x473b7c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x473b9f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0xb
jb 0x473b2b
jmp 0x473b93
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004607e0
mov eax, edi
mov ecx, 0xb
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.00473ae0

Function at 0x475740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x475806
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x369e3d35f7c63db
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xe9da5c03
movabs rdx, 0x50a010a07020804
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x9070400
xor eax, eax
jmp 0x4757a0
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4757d2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4757f7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
cmp rsi, 0xb
jb 0x475784
jmp 0x4757eb
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004607e0
mov eax, edi
mov ecx, 0xb
nop
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.00475740

Function at 0x4791c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x479278
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd8f96e1a20671421
mov qword [rsp + 0x28], rdx
movabs rdx, 0x304000103070606
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x606
xor eax, eax
jmp 0x479215
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x479248
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x47926b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
nop
cmp rsi, 8
jb 0x4791fb
jmp 0x47925f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004607e0
mov eax, edi
mov ecx, 8
call fcn.004607e0
nop
call fcn.0045e500
nop dword [rax]
jmp fcn.004791c0
Function at 0x47a2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47a3c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x382648372a6ef7df
mov qword [rsp + 0x30], rdx
movabs rdx, 0xca72282771022e07
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd000f01060a0f00
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd0304070d000f01
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90f0506010c0801
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x47a360
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x47a392
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x47a3b7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x10
jb 0x47a342
jmp 0x47a3ab
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004607e0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.0047a2e0

Function at 0x47c0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c1db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x28bc6168dbd522e0
mov qword [rsp + 0x39], rdx
movabs rdx, 0xcf43df3b656a3228
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7419936f085f5564
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9020b1201140210
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x600011202120807
mov qword [rsp + 0x25], rdx
movabs rdx, 0x14080c0e06000112
mov qword [rsp + 0x29], rdx
movabs rdx, 0x3070315120b0103
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x47c179
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x47c1ab
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x47c1ce
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x17
jb 0x47c15f
jmp 0x47c1c2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0045b080
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004607e0
mov eax, edi
mov ecx, 0x17
call fcn.004607e0
nop
nop dword [rax + rax]
call fcn.0045e500
jmp fcn.0047c0e0
Function at 0x47c8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c9cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x44a2887565687489
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x8844a28875656874
mov qword [rsp + 0x30], rdx
movabs rdx, 0x52718f69b76e8543
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6100e0e060a0000
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0c06100e0e060a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x504080f0a08
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x47c96a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x47c99c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x47c9bf
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0x11
jb 0x47c950
jmp 0x47c9b3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004607e0
mov eax, edi
mov ecx, 0x11
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.0047c8e0

Function at 0x47ca60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47cb46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x443b5f2029200c5a
mov qword [rsp + 0x31], rdx
movabs rdx, 0x521714ed3a654044
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80e020404000001
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30a0c080e0204
mov qword [rsp + 0x21], rdx
movabs rdx, 0x60a04070a0b070d
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x47cae0
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x19]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x47cb12
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47cb37
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x19]
cmp rsi, 0xf
jb 0x47cac2
jmp 0x47cb2b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004607e0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.0047ca60

Function at 0x485350
Capabilities:
Encode data using xor

Disassembly:
mov rbx, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x20]
test rdx, 0xf
jne 0x4853ca
mov rax, 0
nop word [rax + rax]
nop dword [rax]
movdqu xmm0, xmmword [rsi + rax]
movdqu xmm1, xmmword [rcx + rax]
pxor xmm0, xmm1
movdqu xmmword [rbx + rax], xmm0
add rax, 0x10
cmp rdx, rax
jne 0x485380
ret
sub rdx, 1
mov dil, byte [rsi + rdx]
mov al, byte [rcx + rdx]
xor dil, al
mov byte [rbx + rdx], dil
test rdx, 7
jne 0x4853a0
cmp rdx, 0
je 0x4853ec
test rdx, 0xf
je 0x48536d
test rdx, 7
jne 0x4853a0
sub rdx, 8
mov rdi, qword [rsi + rdx]
mov rax, qword [rcx + rdx]
xor rdi, rax
mov qword [rbx + rdx], rdi
cmp rdx, 0x10
jge 0x48536d
ret
Function at 0x4854a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4855e7
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x203346653a726776
mov qword [rsp + 0x53], rdx
movabs rdx, 0x4572735d75203346
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6568745a6a896580
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f824f4c652e5b6e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x818a6d9761814b5a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x220d050103171e0c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x31e1a16171c220d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x823011d1d09240b
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x800220c0c1f1619
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1f10081119111614
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x18101e061b18001a
mov qword [rsp + 0x43], rdx
movabs rdx, 0x17170f1705211002
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x485587
movzx r9d, byte [rsp + rsi + 0x53]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x53], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x53], dl
add rax, 2
cmp rax, 0x36
jge 0x4855b7
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x4855da
movzx r8d, byte [rsp + rdi + 0x53]
sub r8d, edx
cmp rsi, 0x25
jb 0x48556a
jmp 0x4855ce
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x25
call fcn.0045b080
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.004607e0
mov eax, edi
mov ecx, 0x25
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004854a0
Function at 0x488100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x488326
push rbp
mov rbp, rsp
sub rsp, 0x98
movups xmmword [rsp + 0xa8], xmm15
movups xmmword [rsp + 0xb8], xmm15
movups xmmword [rsp + 0xc8], xmm15
movups xmmword [rsp + 0xd8], xmm15
movabs rdx, 0xd7e7314c884b3c76
mov qword [rsp + 0x58], rdx
movabs rdx, 0x4bf4565e72a9a6c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x16443c6d7e3b2f3e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x4e84f76d6c2127a9
mov qword [rsp + 0x70], rdx
movabs rdx, 0x9178ae5b8eb2ab67
mov qword [rsp + 0x78], rdx
movabs rdx, 0x8f99793497752349
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2d1ccb2253285784
mov qword [rsp + 0x88], rdx
movabs rdx, 0x60708cd989d684e
mov qword [rsp + 0x90], rdx
movabs rdx, 0x26350c3a0b071d0b
mov qword [rsp + 0x16], rdx
movabs rdx, 0x200e26350c3a0b07
mov qword [rsp + 0x18], rdx
movabs rdx, 0x82322211e06031b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd3318093c203514
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3b260c312f25272a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x37003901202e2b2d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x302414242d1f1e0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1628372f1d022613
mov qword [rsp + 0x48], rdx
movabs rdx, 0x41c092638150136
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x488264
movzx r8d, byte [rsp + rbx + 0x58]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rsi + 0x58], dl
mov byte [rsp + rbx + 0x58], dil
add rax, 2
cmp rax, 0x42
jge 0x48829d
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
nop word [rax + rax]
cmp rsi, 0x40
jae 0x488314
movzx edi, byte [rsp + rsi + 0x58]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x74]
cmp rbx, 0x40
jb 0x48824a
jmp 0x488308
movups xmmword [rsp + 0x16], xmm15
movups xmmword [rsp + 0x26], xmm15
movups xmmword [rsp + 0x36], xmm15
movups xmmword [rsp + 0x46], xmm15
xor eax, eax
jmp 0x4882c5
movzx ecx, byte [rsp + rax + 0x58]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 0x40
jl 0x4882b9
movups xmm0, xmmword [rsp + 0x16]
movups xmmword [rsp + 0xa8], xmm0
movups xmm0, xmmword [rsp + 0x26]
movups xmmword [rsp + 0xb8], xmm0
movups xmm0, xmmword [rsp + 0x36]
movups xmmword [rsp + 0xc8], xmm0
movups xmm0, xmmword [rsp + 0x46]
movups xmmword [rsp + 0xd8], xmm0
add rsp, 0x98
pop rbp
ret
mov eax, ebx
mov ecx, 0x40
call fcn.004607e0
mov eax, esi
mov ecx, 0x40
nop dword [rax + rax]
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.00488100
Function at 0x48aaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ab78
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc6aee885afb8b4ef
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xf6f23133
movabs rdx, 0x60b0306010a0505
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa04060b0306010a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0007030200070a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x48ab17
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x12
jge 0x48ab48
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x48ab6b
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x48aafa
jmp 0x48ab5f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004607e0
mov eax, edi
mov ecx, 0xc
call fcn.004607e0
nop
call fcn.0045e500
nop dword [rax]
jmp fcn.0048aaa0

Function at 0x48c460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c55d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x856ad86075c18060
mov qword [rsp + 0x36], rdx
movabs rdx, 0x76ec856ad86075c1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x82aeae337d39837a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0610100f080400
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6100d0205050505
mov qword [rsp + 0x24], rdx
movabs rdx, 0x71106100d020505
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9080b010d0a0305
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x48c500
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x48c52d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x48c550
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x48c4df
jmp 0x48c544
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0045b080
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004607e0
mov eax, edi
mov ecx, 0x12
call fcn.004607e0
nop
nop dword [rax]
call fcn.0045e500
jmp fcn.0048c460