joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47b420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47b513
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6b41f20c6576be08
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8e72b36b41f20c65
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa08010a05000a05
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xa040401
xor eax, eax
jmp 0x47b48b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x47b4cd
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0xc
jae 0x47b505
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47b4f4
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x50]
cmp rsi, 0xb
jb 0x47b471
jmp 0x47b4e8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0047b420

Function at 0x47bfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47c09f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x52706967aa8a61b4
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe2a5bb6e957bf352
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0a000806060c09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4000900030a0d0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa080208090a020e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x47c024
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x47c05b
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x47c091
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x47c085
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x47c007
jmp 0x47c076
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0xf
call fcn.00457f40
mov rax, rsi
mov ecx, 0x16
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0047bfa0
Function at 0x47dc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47dcdf
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x4b4e68515d64564d
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x6e57
movabs rdx, 0x802020804010706
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060307
xor eax, eax
jmp 0x47dc66
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x47dc9d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x47dcd1
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47dcc5
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x47dc49
jmp 0x47dcb8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0047dc00

Function at 0x47f040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47f12d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8170836f64837085
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7e729d8170836f64
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70a06010404
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa000805020000
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x47f0b5
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x47f0ec
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x47f11f
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x47f113
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x47f098
jmp 0x47f107
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0047f040
Function at 0x47fe40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x47ff29
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8acaf7498ff59b4f
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xa19e
movabs rdx, 0x509010806060205
mov qword [rsp + 0x22], rdx
movabs rdx, 0x603090702090509
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x47feaa
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x47fee8
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x47ff1b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x47ff0f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
nop
cmp rsi, 0xa
jb 0x47fe90
jmp 0x47ff03
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0047fe40

Function at 0x4808c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4809a9
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x250468f046f93350
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x67424229
movabs rdx, 0x202060602060304
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa01090807080103
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48092e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x480968
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x10
jae 0x48099b
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x48098f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x480911
jmp 0x480983
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004808c0
Function at 0x480ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x480bb8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x4f350df60e3d68d3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x302050600030405
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4070200
xor eax, eax
jmp 0x480b40
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x480b77
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x480baa
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x480b9e
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x480b22
jmp 0x480b92
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457f40
mov eax, edi
mov ecx, 8
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.00480ae0

Function at 0x481440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48151f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3dff6e3014f73b25
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x33
movabs rdx, 0x107080603000402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x408
xor eax, eax
jmp 0x4814a3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4814da
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x481511
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x481505
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x481486
jmp 0x4814f5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 9
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00481440
Function at 0x481880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x481955
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0xc4b6c41c5f24ba54
mov qword [rsp + 0x20], rdx
movabs rdx, 0x705010602050406
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4818d4
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x481910
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x481947
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x48193b
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 8
jb 0x4818ba
jmp 0x48192f
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
nop dword [rax]
call fcn.00446000
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00457f40
mov eax, edi
mov ecx, 8
call fcn.00457f40
mov rax, rsi
mov ecx, 8
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00481880

Function at 0x482920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4829ff
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5c70745c655d6e45
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x403010501070606
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x602
xor eax, eax
nop
jmp 0x482980
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4829bc
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x4829f1
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4829e5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 8
jb 0x482962
jmp 0x4829d7
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
nop
call fcn.00457f40
mov eax, edi
mov ecx, 8
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00482920
Function at 0x485400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x485529
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xdff6f3ef818ffbf9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x74e806c9878e5fe5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x74616ee174e806c9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x847215f95f6e1d69
mov qword [rsp + 0x32], rdx
movabs rdx, 0x71b06070606050b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x150507020a0c0e08
mov qword [rsp + 0x42], rdx
movabs rdx, 0x404030d00051505
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc1907010d001810
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4854b1
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4854e8
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
cmp rsi, 0x1e
jae 0x48551b
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x48550f
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x485494
jmp 0x485503
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457f40
mov eax, edi
mov ecx, 0x1c
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1e
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00485400

Function at 0x4861a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4862ab
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xdc113070bae2014
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x828c0dc113070bae
mov qword [rsp + 0x20], rdx
movabs rdx, 0x726f0e1f65c26564
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60a0707000c0502
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5010a0408030309
mov qword [rsp + 0x38], rdx
movabs rdx, 0x608000303060f0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x486233
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x48626a
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x48629d
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x486291
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x486216
jmp 0x486285
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457f40
mov eax, edi
mov ecx, 0x12
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004861a0
Function at 0x48b260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48b33f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe9f8a76c61b0a0e6
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6e
movabs rdx, 0x500020101060700
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x607
xor eax, eax
jmp 0x48b2c0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x48b2fc
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x48b331
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x48b325
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 9
jb 0x48b2a6
jmp 0x48b317
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop
call fcn.00457f40
mov eax, edi
mov ecx, 9
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0048b260
Function at 0x48eb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ec49
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x487809e4e76d1063
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x1314
movabs rdx, 0x303090108040809
mov qword [rsp + 0x22], rdx
movabs rdx, 0x808050703070303
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x48ebcd
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x48ec08
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0xe
jae 0x48ec3b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x48ec2f
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x48ebb0
jmp 0x48ec23
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0048eb60

Function at 0x48edc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48eeb3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb31524bb82b56e75
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7265eeb366c7b315
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40a0b0809080505
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7080b0302050306
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x48ee32
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x61]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x48ee6e
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x48eea5
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x48ee95
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x61]
cmp rsi, 0xe
jb 0x48ee18
jmp 0x48ee89
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0048edc0
Function at 0x48fd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48feb8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xa74cb37b763d2aa
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd00d6feb6ed84c03
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf012a1c4596f6ed0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x799503bb7aa81a61
mov qword [rsp + 0x32], rdx
movabs rdx, 0x14160e1c00080712
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x318070a03021416
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1a0a0f1b1e131a19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x21d0f051b041516
mov qword [rsp + 0x50], rdx
movabs rdx, 0x191302080118010c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x48fe40
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x26
jge 0x48fe77
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
cmp rsi, 0x26
jae 0x48feaa
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x48fe9e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1f
jb 0x48fe23
jmp 0x48fe92
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00457f40
mov eax, edi
mov ecx, 0x1f
call fcn.00457f40
mov rax, rsi
mov ecx, 0x26
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.0048fd80
Function at 0x491420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x491513
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x721e63e52b27656d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe5ca8a721e63e52b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x503040308050504
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50203060a0a0902
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x491492
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4914ce
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x491505
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4914f5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0xb
jb 0x491478
jmp 0x4914e9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00491420

Function at 0x491520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4915ff
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x896df61ab057566
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x28
movabs rdx, 0x602030706070705
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x702
xor eax, eax
jmp 0x491583
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x6c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x6c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4915ba
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x4915f1
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4915e5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x491566
jmp 0x4915d5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 9
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00491520