joyce8/EMBER2024-capa huggingface dataset:
Function at 0x473a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x473b9a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x8aa86e998a9fa473
mov qword [rsp + 0x44], rdx
movabs rdx, 0x78647a805f6b8269
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x2e93736578647a80
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8282651775717472
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1201010604090207
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60d091a0c011201
mov qword [rsp + 0x24], rdx
movabs rdx, 0x150f1b1b03130f12
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x418141813021900
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb1403130a040d13
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x473b37
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x26
jge 0x473b69
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x473b8d
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x1c
jb 0x473b1d
jmp 0x473b81
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456440
mov eax, edi
mov ecx, 0x1c
call fcn.00456440
nop
call fcn.00454160
nop
jmp fcn.00473a80

Function at 0x474e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x474eea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6456974da652431
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4a6506456974da65
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6416476f47043c5b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110f030300010107
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0d060d0c060603
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc090b0c100a0711
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x474e8d
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jge 0x474eba
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x474edd
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x474e70
jmp 0x474ed1
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456440
mov eax, edi
mov ecx, 0x12
call fcn.00456440
nop
call fcn.00454160
jmp fcn.00474e00
Function at 0x476400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x476538
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x726f0573d9cc20ff
mov qword [rsp + 0x49], rdx
movabs rdx, 0x745b646e5fa06272
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6166f1722074d861
mov qword [rsp + 0x58], rdx
movabs rdx, 0xec203764d87872f8
mov qword [rsp + 0x60], rdx
movabs rdx, 0xfdf85bf6f806cf6f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x3240a0023011c19
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2522210f08050908
mov qword [rsp + 0x25], rdx
movabs rdx, 0x212624102522210f
mov qword [rsp + 0x29], rdx
movabs rdx, 0xe200d0e150f1310
mov qword [rsp + 0x31], rdx
movabs rdx, 0x31c171409231e10
mov qword [rsp + 0x39], rdx
movabs rdx, 0x1a0d0f02190919
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x4764d5
movzx r9d, byte [rsp + rsi + 0x49]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x49], dl
mov byte [rsp + rsi + 0x49], r8b
add rax, 2
cmp rax, 0x2c
jge 0x476508
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x27
jae 0x47652b
movzx r8d, byte [rsp + rdi + 0x49]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
nop
cmp rsi, 0x27
jb 0x4764bb
jmp 0x47651f
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x27
call fcn.00444780
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.00456440
mov eax, edi
mov ecx, 0x27
call fcn.00456440
nop
call fcn.00454160
nop dword [rax]
jmp fcn.00476400

Function at 0x47c7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c886
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xce5e726f77e0656e
mov qword [rsp + 0x31], rdx
movabs rdx, 0x6e8f6ff01c4ed0ce
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7060d060a080b02
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa0807060d060a08
mov qword [rsp + 0x21], rdx
movabs rdx, 0x80d0608090d0707
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x47c820
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x47c852
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47c877
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0xf
jb 0x47c802
jmp 0x47c86b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456440
mov eax, edi
mov ecx, 0xf
nop
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0047c7a0
Function at 0x47c8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c9c7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6b7b4b6f70585168
mov qword [rsp + 0x45], rdx
movabs rdx, 0x6f72ff6b7b4b6f70
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6e3b35f86251e570
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2065567b7463656e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9d67736557cf725d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x100c051b02211d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe1800050f081105
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1d081807010d1903
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1e2111071c001e10
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1822181e17031906
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x47c969
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
cmp rax, 0x28
jge 0x47c997
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x23
jae 0x47c9ba
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
cmp rsi, 0x23
jb 0x47c94c
jmp 0x47c9ae
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x23
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00456440
mov eax, edi
mov ecx, 0x23
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0047c8a0

Function at 0x47c9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47cacc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2001b69677746e6e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x728a1092a7c92001
mov qword [rsp + 0x38], rdx
movabs rdx, 0x96fca39768639ab8
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe06080b0a010514
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf15050108080e06
mov qword [rsp + 0x22], rdx
movabs rdx, 0x120c0e0904130e05
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x47ca6a
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x47ca9c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x47cabf
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
cmp rsi, 0x16
jb 0x47ca50
jmp 0x47cab3
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456440
mov eax, edi
mov ecx, 0x16
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0047c9e0
Function at 0x47ef80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f06c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x73de636f6c99ff1b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb29173de636f6c99
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd64d62a4999fa776
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9110b0601090009
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x90c110809110b06
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0e0b0102100808
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x47f00a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x47f03c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x47f05f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
cmp rsi, 0x12
jb 0x47eff0
jmp 0x47f053
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456440
mov eax, edi
mov ecx, 0x12
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0047ef80

Function at 0x481360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48145d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xce63bdddce20c73e
mov qword [rsp + 0x39], rdx
movabs rdx, 0xb32074dbe76cc8ce
mov qword [rsp + 0x40], rdx
movabs rdx, 0xdcce403365df2b6e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3161310080c130b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x70b14050a13050e
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe14070b14050a13
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1511140401051100
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x481400
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x48142d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x481450
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4813df
jmp 0x481444
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456440
mov eax, edi
mov ecx, 0x17
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.00481360
Function at 0x484c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x484d2c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x15bc0613c7610f6f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6421
movabs rdx, 0x704030707020108
mov qword [rsp + 0x18], rdx
movabs rdx, 0x503030203060704
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x484cc4
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xe
jge 0x484cfc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x484d1f
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
cmp rsi, 0xa
jb 0x484caa
jmp 0x484d13
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456440
mov eax, edi
mov ecx, 0xa
call fcn.00456440
nop
call fcn.00454160
jmp fcn.00484c60

Function at 0x485b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485c1d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x72a0e5c816350a94
mov qword [rsp + 0x43], rdx
movabs rdx, 0x746cbac665ba7fcf
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xa4741b69be746cba
mov qword [rsp + 0x50], rdx
movabs rdx, 0x652c252fc4e32d6f
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa18070600071101
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x114100814040609
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc0908030d090704
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x160017051b0a1a
mov qword [rsp + 0x33], rdx
movabs rdx, 0x20d19121b180614
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x485bc0
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 + 0x75]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x485bed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x485c10
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x485b9d
jmp 0x485c04
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456440
mov eax, edi
mov ecx, 0x1d
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.00485b00
Function at 0x485c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485d26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x69179c902723d2da
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1ee46fad2772d737
mov qword [rsp + 0x38], rdx
movabs rdx, 0x402040c0b030e05
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x205090e08080402
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf0e0c0601060f00
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x485cc0
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x485cf2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x485d17
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x10
jb 0x485ca2
jmp 0x485d0b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456440
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456440
nop
call fcn.00454160
jmp fcn.00485c40

Function at 0x486740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48680c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x787f7e8c8ca68d82
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6b952c6c
movabs rdx, 0x407070a01030102
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x805090706000407
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4867a5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x4867dc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4867ff
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0xc
jb 0x48678b
jmp 0x4867f3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456440
mov eax, edi
mov ecx, 0xc
call fcn.00456440
nop
call fcn.00454160
jmp fcn.00486740
Function at 0x486aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x486b86
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9df06eaeb109ae73
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xadb47243589df06e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2020b0609090202
mov qword [rsp + 0x19], rdx
movabs rdx, 0x40902020b060909
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30104040c0b0708
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x486b20
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x486b52
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x486b77
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0xd
jb 0x486b02
jmp 0x486b6b
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456440
mov eax, edi
mov ecx, 0xd
nop
call fcn.00456440
nop
call fcn.00454160
jmp fcn.00486aa0

Function at 0x487e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x487f06
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc3a9666e1778d574
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb2d175bd1a23c3a9
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90c0d0104010d07
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0a080c090c0d01
mov qword [rsp + 0x22], rdx
movabs rdx, 0x708030d06060608
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x487ea0
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x487ed2
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x487ef7
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0xe
jb 0x487e82
jmp 0x487eeb
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456440
mov eax, edi
mov ecx, 0xe
nop
call fcn.00456440
nop
call fcn.00454160
jmp fcn.00487e20
Function at 0x48a340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a407
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x67645f6f745f732f
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x6c6c6b67
movabs rdx, 0x807000808050206
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x302050008000807
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x48a3a8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x48a3d7
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x48a3fa
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x48a38b
jmp 0x48a3ee
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456440
mov eax, edi
mov ecx, 0xb
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0048a340

Function at 0x48a420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48a4e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x32d1cbc4ffd4cbfd
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x37dcc2d0
movabs rdx, 0x909000105040b06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10603080303020a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x48a488
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x48a4b7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x48a4da
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x48a46b
jmp 0x48a4ce
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456440
mov eax, edi
mov ecx, 0xc
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0048a420

Function at 0x48ad60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ae27
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcf016e289bd6c875
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xc96cd1cf
movabs rdx, 0x8060a0a0a040308
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x102060607080806
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x48adc8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x48adf7
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x48ae1a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x48adab
jmp 0x48ae0e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456440
mov eax, edi
mov ecx, 0xb
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0048ad60
Function at 0x48bf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48c04c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e65474727792d21
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf239f720611d6e65
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0b08000a050d03
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x300040d08010c04
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x48bfef
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x48c01c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x48c03f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x48bfd2
jmp 0x48c033
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456440
mov eax, edi
mov ecx, 0xe
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0048bf80

Function at 0x48f4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f5ba
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x513239563e4b3c55
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4969467265204f56
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4f0a43604e616369
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6a4f49316f663d67
mov qword [rsp + 0x58], rdx
movabs rdx, 0x130208161418000d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa1c021808171302
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd131a061a1c1f19
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1010501031e1705
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6090f05071f171d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x48f557
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x26
jge 0x48f589
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x48f5ad
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 0x20
jb 0x48f53d
jmp 0x48f5a1
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.00444780
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x20
call fcn.00456440
mov eax, edi
mov ecx, 0x20
call fcn.00456440
nop
call fcn.00454160
nop
jmp fcn.0048f4a0